Australia Privacy (Credit Reporting) Code 2025 2(2): Credit reporting agreements between bodies and providers must bind both to Part IIIA, the Regulations and the Code

Every agreement a credit reporting body enters with a credit provider to satisfy subsections 20N(3) and 20Q(2) of the Act (quality and security of credit reporting information) must oblige both parties to comply, as applicable from time to time, with Part IIIA of the Act, the Privacy Regulation 2013 and the registered CR Code.

Other controls in Schedule 2 Divisions 1 and 2: Application, destruction, credit reporting agreements, training and transparency – Australia Privacy (Credit Reporting) Code 2025

1 The Code binds all credit reporting bodies, all credit providers other than non-participating providers, and all affected information recipients
1A Destroy credit-related personal information irretrievably, or where electronic destruction is impossible put it beyond use on the five conditions
2(3) Inform and train employees who handle credit reporting or credit eligibility information in Part IIIA, the Regulations and the Code
3 Credit reporting bodies must publish their credit reporting information management policy on their website

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australia Privacy (Credit Reporting) Code 2025 controls