Commonwealth Consolidated Acts

PRIVACY ACT 1988 - SECT 24

Offences

             (1)  An entity commits an offence if:

                     (a)  the entity obtains credit reporting information; and

                     (b)  the information is obtained from a credit reporting body; and

                     (c)  the entity is not:

                              (i)  an entity to which the body is permitted to disclose the information under Division 2 of this Part; or

                             (ii)  an access seeker for the information.

Penalty:  200 penalty units.

             (2)  An entity commits an offence if:

                     (a)  the entity obtains credit reporting information; and

                     (b)  the information is obtained from a credit reporting body; and

                     (c)  the information is obtained by false pretence.

Penalty:  200 penalty units.

Civil penalties

             (3)  An entity must not obtain credit reporting information from a credit reporting body if the entity is not:

                     (a)  an entity to which the body is permitted to disclose the information under Division 2 of this Part; or

                     (b)  an access seeker for the information.

Civil penalty:          2,000 penalty units.

             (4)  An entity must not obtain, by false pretence, credit reporting information from a credit reporting body.

Civil penalty:          2,000 penalty units.