Some parts of the new Credit Reporting Privacy Code, which applies to all businesses in New Zealand that gather and sell credit information, took effect as of 1 April 2005. The Code has implications for credit providers as well as credit reporting businesses.
The Code introduces a new level of focus on fair and transparent processes for collecting and using personal information in credit transactions. Banks and other credit providers will need to review their current business practices.
The Office of the Privacy Commissioner has developed the Credit Reporting Privacy Code in order to introduce some formal controls over the collection and use of personal information by credit reporting businesses.
The main objectives of the Code are to improve the accuracy of credit reporting, to reduce opportunities for the misuse of credit information, and to encourage effective complaints handling procedures.
The Code is to be phased in, with some requirements taking effect on 1 April 2006. However, as of 1 April 2005, credit reporters have been required to:
From 1 April 2006, credit reporters must also:
The Credit Reporting Privacy Code has clear implications both for credit reporters and for consumers, but credit providers such as banks are also affected.
In particular, credit providers wishing to use the services of credit reporters will (before 1 April 2006) need to sign subscriber agreements under which they will be required to explain clearly to their customers what happens to personal information when a credit check is done.
The Credit Reporting Privacy Code is legally enforceable.
For more information, see www.privacy.org.nz.
For more information on any of the cases, articles and features in Financial Services Quarterly, please email Rachel Gowing or call on 64 9 916 8825.
This publication is necessarily brief and general in nature. You should seek professional advice before taking any action in relation to the matters dealt with in this publication.