This Division sets out rules that apply to credit providers in relation to their handling of the following:

  (a)   credit information;

  (b)   credit eligibility information;

  (c)   CRB derived information.

If a credit provider is an APP entity, the rules apply in relation to that information in addition to, or instead of, any relevant Australian Privacy Principles.