Commonwealth Consolidated Acts

PRIVACY ACT 1988 - SECT 18G

                   A credit reporting agency in possession or control of a credit information file, or a credit provider or credit reporting agency in possession or control of a credit report, must:

                     (a)  take reasonable steps to ensure that personal information contained in the file or report is accurate, up‑to‑date, complete and not misleading; and

                     (b)  ensure that the file or report is protected, by such security safeguards as are reasonable in the circumstances, against loss, against unauthorised access, use, modification or disclosure, and against other misuse; and

                     (c)  if it is necessary for the file or report to be given to a person in connection with the provision of a service to the credit reporting agency or credit provider, ensure that everything reasonably within the power of the credit reporting agency or credit provider is done to prevent unauthorised use or disclosure of personal information contained in the file or report.