17.08.2010

Consumer and commercial credit

54.160 Part IIIA distinguishes between consumer and commercial credit reporting. Part IIIA regulates consumer credit reporting activities, but does not cover personal information about commercial loans (that is, loans not intended to be used wholly or primarily for domestic, family or household purposes).[198] The handling of personal information relating to commercial loans (referred to below

Publications

Read more
17.08.2010

Review of the regulations

54.178 In DP 72, the ALRC proposed that the new Privacy (Credit Reporting Information) Regulations should be reviewed after five years of operation.[221] The ALRC considered that a requirement to review the regulations was desirable, among other reasons, to assess the impact of more comprehensive credit reporting on privacy and the credit market;[222] and to

Publications

Read more
17.08.2010

Credit reporting code

54.182 In DP 72, the ALRC noted that some matters raised in the Inquiry are not addressed most appropriately through legislation. For example, while credit providers generally support the principle of reciprocity in credit reporting, and obligations to report information consistently, arguably, credit providers themselves and their industry associations should take responsibility for such matters—within

Publications

Read more
17.08.2010

Part IIIA and the NPPs

54.4 In considering options for reform, it is important to understand the relationship between the credit reporting provisions and the existing National Privacy Principles (NPPs). Part IIIA of the Privacy Act was originally intended to adopt and reflect privacy principles in the specific context of credit reporting.[4] The NPPs were enacted later, in 2000,[5] and

Publications

Read more
17.08.2010

Repeal and new regulation under the Act

54.11 There are three main approaches available for reform of the credit reporting provisions:Credit reporting could continue to be regulated under Part IIIA of the Privacy Act 1988 (Cth) and its related provisions.Part IIIA and its related provisions could be repealed, and credit reporting regulated under the general provisions of the Privacy Act.Credit reporting could

Publications

Read more
17.08.2010

Credit reporting information

54.70 The provisions of Part IIIA apply variously to personal information in ‘credit information files’, ‘credit reports’ and ‘reports’. As discussed in Chapter 53, each term is defined differently. Briefly:a ‘credit information file’ is information kept by a credit reporting agency in the course of carrying on a credit reporting business;[86]a ‘credit report’ is information

Publications

Read more
17.08.2010

Credit reporting agencies

54.87 Under the Privacy Act, ‘a person is a credit reporting agency if the person is a corporation that carries on a credit reporting business’.[101] A ‘credit reporting business’ is defined as a business or undertaking … that involves the preparation or maintenance of records containing personal information relating to individuals (other than records in

Publications

Read more
17.08.2010

Credit providers

54.101 In general, credit reporting agencies may disclose personal information contained in credit information files (for example, a credit report) only to those persons who are ‘credit providers’ as that term is defined in the Act.[113] An entity is a credit provider under s 11B if the entity is, among other things, abank;corporation, a substantial

Publications

Read more
16.08.2010

Discussion Paper proposal

51.47 In DP 72, the ALRC identified support in submissions and consultations for a requirement that data users notify individuals of a breach of their personal information in certain circumstances.[78] Supporters of a data breach notification law gave a number of reasons why such a law would be valuable. These include that it would:provide a

Publications

Read more
16.08.2010

Submissions and consultations

General 51.50 There continued to be strong support among stakeholders for the introduction of a requirement that data users notify individuals of a breach to their personal information where that breach may give rise to real harm to an individual.[84] 51.51 In particular, the OPC expressed strong support for the proposal. In its view, the

Publications

Read more