Australia Privacy (Credit Reporting) Code 2025 16(2)-(4): Never use or disclose credit eligibility or regulated information to assess propensity to accept offers, to target or invite applications, or for direct marketing, beyond the three permitted uses

A credit provider or affected information recipient must not use or disclose credit eligibility information or regulated information to assess the likelihood that an individual will accept an invitation or offer of credit, a variation of credit, or mortgage or commercial credit insurance or its variation; to target or invite an individual to apply for or accept any of those; or for direct marketing. This applies despite anything else in the Code, except that the information may be used to assess an application for credit or such insurance, to assess an application and offer or invite the applicant to apply for a different product where the original is unsuitable, and to exclude an individual at significant risk of defaulting on existing credit from a direct marketing communication.