Commonwealth Consolidated Acts

PRIVACY ACT 1988 - SECT 24

Offences

  (1)   An entity commits an offence if:

  (a)   the entity obtains credit reporting information; and

  (b)   the information is obtained from a credit reporting body; and

  (c)   the entity is not:

  (i)   an entity to which the body is permitted to disclose the information under Division   2 of this Part; or

  (ii)   an access seeker for the information.

Penalty:   200 penalty units.

  (2)   An entity commits an offence if:

  (a)   the entity obtains credit reporting information; and

  (b)   the information is obtained from a credit reporting body; and

  (c)   the information is obtained by false pretence.

Penalty:   200 penalty units.

Civil penalties

  (3)   An entity must not obtain credit reporting information from a credit reporting body if the entity is not:

  (a)   an entity to which the body is permitted to disclose the information under Division   2 of this Part; or

  (b)   an access seeker for the information.

Civil penalty:   2,000 penalty units.

  (4)   An entity must not obtain, by false pretence, credit reporting information from a credit reporting body.

Civil penalty:   2,000 penalty units.