The code addresses the credit information collected, held, used, and disclosed by credit reporters. For credit reporters the code takes the place of the information privacy principles.
Warning: This is only a generalised summary. If there is a difference between this summary and a provision of the Code or Act, the Code or Act prevails.
To view or download The Credit Reporting Privacy Code 2004 with commentary and amendments as a PDF file click here: Privacy Commissioner's web site.
(1) A credit reporter that holds credit information must not keep that information for longer than is required for the purposes for which the information may lawfully be used.
(2) It will be sufficient compliance with subrule (1) if a credit reporter holds credit information of the types specified in column 1 of Schedule 1 for no longer than the permitted period set out in column 2 for that type.
(3) A credit reporter must display on the credit reporter's website a statement of the retention periods applicable to each type of information specified in Schedule 1.
(4) This rule applies to credit information held by a credit reporter that was obtained before or after the commencement of this rule. Note: An action is not in breach of this rule if it is authorised or required by or under law - Privacy Act, s.7(4).
| Types of Credit Information | Retention period |
| Lost, stolen or compromised identification documents information |
5 years from date of report |
| Credit application information | 5 years from date of application |
| Credit account information (other than repayment history information) |
2 years from date credit account closed |
| Repayment history information | 2 years from month following due date of periodic payment |
| Credit default information relating to debtor credit default | 5 years from date of default |
| Credit default information relating to guarantor credit default | 5 years from date of notification of debtor’s default to guarantor |
| Serious credit infringement information | 5 years from date of report |
| Credit non-compliance action information | 6 months from date of action |
| Confirmed credit non-compliance action information | 5 years from date of action |
| Judgments | 5 years from date of judgment |
| Single bankruptcy | 4 years from date of discharge from bankruptcy |
| Single entry to no asset procedure | 4 years from date of discharge from the no asset procedure |
| Multiple insolvency events (as provided in Insolvency Act 2006, s.449A) |
Indefinite |
| Summary instalment orders | 5 years from date of order |
| Previous enquiry record | 5 years from date of enquiry |
| Credit Score | 2 working days from date of creation |
Your rights under the credit reporting privacy code 2004.
Find out how to access, view and / or change your data (credit) file.
What to do if you believe that you have been unfairly rated by a Shark Patrol Member.
What to do if you believe that a member has abused access to the database in some way.
Shark Patrol's Code of Ethics are in addition to the Terms of use and Privacy Policy.
The Privacy Act has as one of its main purposes the promotion and protection of individual privacy.