Information about a person's finances and creditworthiness is one of the most sensitive categories of personal information. The Privacy Act 1988 (Privacy Act) has strict provisions for organisations and government agencies who handle credit information.
Credit providers, like banks and building societies, provide reports about people's outstanding debts and credit applications to central databases managed by credit reporting agencies.
Part IIIA of the Privacy Act deals with credit reporting and sets out rules about what information credit providers can report and to whom the credit reporting agency can give that information.
Part IIIA provides privacy safeguards in relation to consumer credit information (credit you obtain for household or domestic purposes). Generally Part IIIA does not cover commercial credit information (credit sought by individuals for commercial purposes) except in some limited circumstances. Whether Part IIIA applies or not, credit providers and reporters must still comply with the National Privacy Principles in the Privacy Act.