National Consumer Credit Protection Amendment (Mandatory Credit Reporting and Other Measures) Act 2021 (5 of 2021)
Schedule 1 Main amendments
Privacy Act 1988
11 At the end of section 20Q
Add:
(3) Without limiting subsection (1), if a credit reporting body holds credit reporting information, the body must store the information:
(a) either:
(i) in Australia or an external Territory; or
(ii) in accordance with any security requirements prescribed by the regulations for storing the information outside of Australia and the external Territories; and
(b) in accordance with any security requirements prescribed by the regulations.
Note: Requirements prescribed for paragraph (b) apply wherever the information is stored.