Privacy Act 1988

PART IIIA - CREDIT REPORTING  

Division 2 - Credit reporting bodies  

Subdivision G - Dealing with credit reporting information after the retention period ends etc.  

SECTION 20V   DESTRUCTION ETC. OF CREDIT REPORTING INFORMATION AFTER THE RETENTION PERIOD ENDS  

20V(1)    
This section applies if:


(a) a credit reporting body holds credit information about an individual; and


(b) the retention period for the information ends.

Note:

There is no retention period for identification information or credit information of a kind referred to in paragraph 6N(k) .



Destruction etc. of credit information

20V(2)    
The credit reporting body must destroy the credit information, or ensure that the information is de-identified, within 1 month after the retention period for the information ends.

Civil penalty: 1,000 penalty units.


20V(3)    
Despite subsection (2), the credit reporting body must neither destroy the credit information nor ensure that the information is de-identified, if immediately before the retention period ends:


(a) there is a pending correction request in relation to the information; or


(b) there is a pending dispute in relation to the information.

Civil penalty: 500 penalty units.


20V(4)    
Subsection (2) does not apply if the credit reporting body is required by or under an Australian law, or a court/tribunal order, to retain the credit information.

Destruction etc. of CRB derived information

20V(5)    
The credit reporting body must destroy any CRB derived information about the individual that was derived from the credit information, or ensure that the CRB derived information is de-identified:


(a) if:


(i) the CRB derived information was derived from 2 or more kinds of credit information; and

(ii) the body is required to do a thing referred to in subsection (2) to one of those kinds of credit information;
at the same time that the body does that thing to that credit information; or


(b) otherwise - at the same time that the body is required to do a thing referred to in subsection (2) to the credit information from which the CRB derived information was derived.

Civil penalty: 1,000 penalty units.


20V(6)    
Despite subsection (5), the credit reporting body must neither destroy the CRB derived information nor ensure that the information is de-identified, if immediately before the retention period ends:


(a) there is a pending correction request in relation to the information; or


(b) there is a pending dispute in relation to the information.

Civil penalty: 500 penalty units.


20V(7)    
Subsection (5) does not apply if the credit reporting body is required by or under an Australian law, or a court/tribunal order, to retain the CRB derived information.


 

Disclaimer and notice of copyright applicable to materials provided by CCH Australia Limited

CCH Australia Limited ("CCH") believes that all information which it has provided in this site is accurate and reliable, but gives no warranty of accuracy or reliability of such information to the reader or any third party. The information provided by CCH is not legal or professional advice. To the extent permitted by law, no responsibility for damages or loss arising in any way out of or in connection with or incidental to any errors or omissions in any information provided is accepted by CCH or by persons involved in the preparation and provision of the information, whether arising from negligence or otherwise, from the use of or results obtained from information supplied by CCH.

The information provided by CCH includes history notes and other value-added features which are subject to CCH copyright. No CCH material may be copied, reproduced, republished, uploaded, posted, transmitted, or distributed in any way, except that you may download one copy for your personal use only, provided you keep intact all copyright and other proprietary notices. In particular, the reproduction of any part of the information for sale or incorporation in any product intended for sale is prohibited without CCH's prior consent.