Australia Privacy (Credit Reporting) Code 2025 23(11)-(13): Take reasonable action, up to termination with notice and dispute resolution, against providers that fail their accuracy or security obligations, and resolve inter-entity disputes fairly and efficiently

A body must take action reasonable in the circumstances, which may include terminating the agreement, where a provider fails its contractual obligations to comply with Part IIIA, the Regulations and the Code, in particular to ensure the credit information it discloses is accurate, up to date and complete, or to protect the credit reporting information it receives from misuse, interference, loss and unauthorised access, modification or disclosure. Termination requires reasonable notice of intention and an opportunity to trigger dispute resolution. Where disputes arise between bodies, providers and affected information recipients about actions taken or required under Part IIIA, the Regulations or the Code, the parties must endeavour to resolve them fairly and efficiently.