Section 23APrivacy Act 1988 (Cth)

Individual may complain about a breach of a provision of this Part etc.

Complaint

(1) An individual may complain to a credit reporting body about an act or practice engaged in by the body that may be a breach of either of the following provisions in relation to the individual:

(a) a provision of this Part (other than section 20R or 20T);

(b) a provision of the registered CR code (other than a provision that relates to that section).

Note: A complaint about a breach of section 20R or 20T, or a provision of the registered CR code that relates to that section, may be made to the Commissioner under Part V.

(2) An individual may complain to a credit provider about an act or practice engaged in by the provider that may be a breach of either of the following provisions in relation to the individual:

(a) a provision of this Part (other than section 21T or 21V);

(b) a provision of the registered CR code (other than a provision that relates to that section) if it binds the credit provider.

Note: A complaint about a breach of section 21T or 21V, or a provision of the registered CR code that relates to that section, may be made to the Commissioner under Part V.

Nature of complaint

(3) If an individual makes a complaint, the individual must specify the nature of the complaint.

(4) The complaint may relate to personal information that has been destroyed or de‑identified.

No charge

(5) The credit reporting body or credit provider must not charge the individual for the making of the complaint or for dealing with the complaint.

Sourced from the Federal Register of Legislation at 17 May 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au. Verify the current text against the official source before relying on it.

Related sections

Research how courts apply s 23A

BriefBridge searches Australian caselaw by meaning — every answer cited to the paragraph.

Try BriefBridge free