Section 24APrivacy Act 1988 (Cth)

Obtaining credit eligibility information from a credit provider

Offences

(1) An entity commits an offence if:

(a) the entity obtains credit eligibility information; and

(b) the information is obtained from a credit provider; and

(c) the entity is not:

(i) an entity to which the provider is permitted to disclose the information under Division 3 of this Part; or

(ii) an access seeker for the information.

Penalty: 200 penalty units.

(2) An entity commits an offence if:

(a) the entity obtains credit eligibility information; and

(b) the information is obtained from a credit provider; and

(c) the information is obtained by false pretence.

Penalty: 200 penalty units.

Civil penalties

(3) An entity must not obtain credit eligibility information from a credit provider if the entity is not:

(a) an entity to which the provider is permitted to disclose the information under Division 3 of this Part; or

(b) an access seeker for the information.

Civil penalty: 2,000 penalty units.

(4) An entity must not obtain, by false pretence, credit eligibility information from a credit provider.

Civil penalty: 2,000 penalty units.

Sourced from the Federal Register of Legislation at 17 May 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au. Verify the current text against the official source before relying on it.

Related sections

Research how courts apply s 24A

BriefBridge searches Australian caselaw by meaning — every answer cited to the paragraph.

Try BriefBridge free