Section 21 — Privacy Act 1988 (Cth)

Guide to this Division

This Division sets out rules that apply to credit providers in relation to their handling of the following:

(a) credit information;

(b) credit eligibility information;

(c) CRB derived information.

If a credit provider is an APP entity, the rules apply in relation to that information in addition to, or instead of, any relevant Australian Privacy Principles.

Sourced from the Federal Register of Legislation at 17 May 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au. Verify the current text against the official source before relying on it.

Related sections

s 20Y — Destruction of credit reporting information in cases of fraud
s 20Z — Dealing with information if there is a pending correction request etc.
s 20ZA — Dealing with information if an Australian law etc. requires it to be retained
s 21A — Application of this Division to credit providers
s 21B — Open and transparent management of credit information etc.
s 21C — Additional notification requirements for the collection of personal information etc.

Research how courts apply s 21

BriefBridge searches Australian caselaw by meaning — every answer cited to the paragraph.

Try BriefBridge free