Australia Privacy (Credit Reporting) Code 2025 24(2)-(3): Commission an independent compliance review of the credit reporting body every 3 years (or sooner on request), consulting the Commissioner on reviewer and scope, and publish the report and response

Every 3 years, or more often if the Commissioner asks, a credit reporting body must commission an independent review of its operations and processes to assess its compliance with its obligations under the Act. It must consult the Commissioner on the choice of reviewer and the scope, and ensure the review report and its response are given to the Commissioner and made publicly available.