Australia Privacy (Credit Reporting) Code 2025
Schedule 2 Division 7: Complaints, record keeping, credit reporting system integrity and the Commissioner's role – Australia Privacy (Credit Reporting) Code 2025

Australia Privacy (Credit Reporting) Code 2025 21(2)-(6): Handle Part IIIA complaints under applicable law, licence or industry code standards (or the listed ISO 10002 sections), belong to a recognised EDR scheme (bodies), respond to complaint consultations promptly, and manage delays beyond 30 days with the individual's agreement

Where a body or provider must meet complaints handling requirements under Australian law, a licence condition or an enforceable industry code, it must apply those requirements to Part IIIA complaints; otherwise it must comply with ISO 10002:2018 sections 4 (guiding principles), 5.2 (leadership and commitment), 6.4 (resources), 8.1 (collection of information) and 8.2 (analysis and evaluation). A credit reporting body must be a member of or subject to a recognised external dispute resolution scheme. An entity consulted by another about a complaint must take reasonable steps to respond as soon as practicable. Where the 30 day resolution period in Part IIIA will not be met, the body or provider must tell the individual before it ends, give the reason and expected timeframe, seek agreement to a reasonable extension, and advise of the right to complain to its external dispute resolution scheme with contact details or, for a provider without one, to the Commissioner.

Maintained by Gerard Blokdyk

Other controls in Schedule 2 Division 7: Complaints, record keeping, credit reporting system integrity and the Commissioner's role – Australia Privacy (Credit Reporting) Code 2025

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.