Privacy Act 1988

PART IIIA - CREDIT REPORTING  

Division 2 - Credit reporting bodies  

Subdivision G - Dealing with credit reporting information after the retention period ends etc.  

SECTION 20ZA   DEALING WITH INFORMATION IF AN AUSTRALIAN LAW ETC. REQUIRES IT TO BE RETAINED  

20ZA(1)    
This section applies if a credit reporting body is not required:

(a) to do a thing referred to in subsection 20V(2) to credit information because of subsection 20V(4) ; or

(b) to do a thing referred to in subsection 20V(5) to CRB derived information because of subsection 20V(7) ; or

(c) to destroy credit reporting information under subsection 20Y(2) because of subsection 20Y(3) .

Use or disclosure

20ZA(2)    
The credit reporting body must not use or disclose the information under Subdivision D of this Division.

Civil penalty: 2,000 penalty units.

20ZA(3)    
However, the credit reporting body may use or disclose the information under this subsection if the use or disclosure of the information is required by or under an Australian law or a court/tribunal order.

20ZA(4)    
If the credit reporting body uses or discloses the information under subsection (3), the body must make a written note of the use or disclosure.

Civil penalty: 500 penalty units.

Other requirements

20ZA(5)    
Subdivision E of this Division (other than section 20Q ) does not apply in relation to the use or disclosure of the information.

Note:

Section 20Q deals with the security of credit reporting information.

20ZA(6)    
Subdivision F of this Division does not apply in relation to the information.