an Act of the Commonwealth or of a State or Territory; or

regulations, or any other instrument, made under such an Act; or

a Norfolk Island enactment; or

a rule of common law or equity.

a court; or

a tribunal; or

a judge (including a judge acting in a personal capacity) or a person acting as a judge; or

a magistrate (including a magistrate acting in a personal capacity) or a person acting as a magistrate; or

a member or an officer of a tribunal;

the CrimTrac Agency; or

the Immigration Department; or

the Office of the Director of Public Prosecutions, or a similar body established under a law of a State or Territory; or

the Corruption and Crime Commission of Western Australia; or

the prevention, detection, investigation, prosecution or punishment of:

criminal offences; or

breaches of a law imposing a penalty or sanction; or

the conduct of surveillance activities, intelligence gathering activities or monitoring activities; or

the conduct of protective or custodial activities; or

the enforcement of laws relating to the confiscation of the proceeds of crime; or

the protection of the public revenue; or

the prevention, detection, investigation or remedying of misconduct of a serious nature, or other conduct prescribed by the regulations; or

the preparation for, or conduct of, proceedings before any court or tribunal, or the implementation of court/tribunal orders.

an agency; or

an organisation; or

a small business operator.

whether or not it is published in print, electronically or in any other form; and

whether or not it is available on the payment of a fee.

an agency; or

a State or Territory authority; or

an agent of an agency, or a State or Territory authority, acting in its capacity as agent; or

a contracted service provider for a Commonwealth contract, or a State contract, acting in its capacity as contracted service provider for that contract.

the individual’s name; or

(b) the individual’s ABN (within the meaning of the A New Tax System (Australian Business Number) Act 1999); or

anything else prescribed by the regulations.

that is a non-profit organisation; and

that engages in activities for cultural, recreational, political, religious, philosophical, professional, trade or trade union purposes.

whether the information or opinion is true or not; and

whether the information or opinion is recorded in a material form or not.

an electronic or other device;

biometric templates.

a parent of the individual; or

a child or sibling of the individual if the child or sibling is at least 18 years old; or

a spouse or de facto partner of the individual; or

a relative of the individual if the relative is:

at least 18 years old; and

a member of the individual’s household; or

a guardian of the individual; or

a person exercising an enduring power of attorney granted by the individual that is exercisable in relation to decisions about the individual’s health; or

a person who has an intimate personal relationship with the individual; or

a person nominated by the individual to be contacted in case of emergency.

an adopted child, stepchild, exnuptial child or foster child of the individual;

(b) someone who is a child of the individual within the meaning of the Family Law Act 1975.

a de facto partner of the first individual; or

(b) the child of the first individual because of the definition of child in this subsection.

a half-brother, half-sister, adoptive brother, adoptive sister, step-brother, step-sister, foster-brother and foster-sister of the individual; and

another individual if a relationship referred to in paragraph (a) can be traced through a parent of either or both of the individuals.

the collection, holding, use or disclosure of personal information by an individual; or

personal information held by an individual;

the entity is an entity of a kind specified in an item in column 1 of the table; and

the item in column 2 of the table applies to the information or identifier; and

such conditions as are specified in the item in column 3 of the table are satisfied.

the information is necessary to provide a health service to the individual; and

either:

the collection is required or authorised by or under an Australian law (other than this Act); or

the information is collected in accordance with rules established by competent health or medical bodies that deal with obligations of professional confidentiality which bind the organisation.

the collection is necessary for any of the following purposes:

research relevant to public health or public safety;

the compilation or analysis of statistics relevant to public health or public safety;

the management, funding or monitoring of a health service; and

that purpose cannot be served by the collection of information about the individual that is de-identified information; and

it is impracticable for the organisation to obtain the individual’s consent to the collection; and

any of the following apply:

the collection is required by or under an Australian law (other than this Act);

the information is collected in accordance with rules established by competent health or medical bodies that deal with obligations of professional confidentiality which bind the organisation;

the information is collected in accordance with guidelines approved under section 95A for the purposes of this subparagraph.

the use or disclosure is necessary for research, or the compilation or analysis of statistics, relevant to public health or public safety; and

it is impracticable for the organisation to obtain the individual’s consent to the use or disclosure; and

the use or disclosure is conducted in accordance with guidelines approved under section 95A for the purposes of this paragraph; and

in the case of disclosure—the organisation reasonably believes that the recipient of the information will not disclose the information, or personal information derived from that information.

the organisation has obtained the information in the course of providing a health service to the first individual; and

the organisation reasonably believes that the use or disclosure is necessary to lessen or prevent a serious threat to the life, health or safety of another individual who is a genetic relative of the first individual; and

the use or disclosure is conducted in accordance with guidelines approved under section 95AA; and

in the case of disclosure—the recipient of the information is a genetic relative of the first individual.

the organisation provides a health service to the individual; and

the recipient of the information is a responsible person for the individual; and

the individual:

is physically or legally incapable of giving consent to the disclosure; or

physically cannot communicate consent to the disclosure; and

(d) another individual (the carer) providing the health service for the organisation is satisfied that either:

the disclosure is necessary to provide appropriate care or treatment of the individual; or

the disclosure is made for compassionate reasons; and

the disclosure is not contrary to any wish:

expressed by the individual before the individual became unable to give or communicate consent; and

of which the carer is aware, or of which the carer could reasonably be expected to be aware; and

the disclosure is limited to the extent reasonable and necessary for a purpose mentioned in paragraph (d).

an APP entity discloses personal information about an individual to an overseas recipient; and

Australian Privacy Principle 8.1 applies to the disclosure of the information; and

the Australian Privacy Principles do not apply, under this Act, to an act done, or a practice engaged in, by the overseas recipient in relation to the information; and

the overseas recipient does an act, or engages in a practice, in relation to the information that would be a breach of the Australian Privacy Principles (other than Australian Privacy Principle 1) if those Australian Privacy Principles so applied to that act or practice.

to have been done, or engaged in, by the APP entity; and

to be a breach of those Australian Privacy Principles by the APP entity.

a responsible person for the individual; and

the relevant agency or State or Territory authority or, if the relevant agency or State or Territory authority has a principal executive, the principal executive:

has agreed that the adoption, use or disclosure of the identifier by the organisation, or the class of organisations, in the circumstances is appropriate; and

has consulted the Commissioner about that adoption, use or disclosure; and

the adoption, use or disclosure of the identifier by the organisation, or the class of organisations, in the circumstances can only be for the benefit of the individual to whom the identifier relates.

the identifier is a kind commonly used in the processing of pay, or deductions from pay, of Commonwealth officers, or a class of Commonwealth officers; and

the circumstances of the use or disclosure of the identifier relate to the provision by:

the organisation; or

the class of organisations;

before the regulations are made, the Minister consults the Commissioner about the proposed regulations.

a mortgage insurer; or

a trade insurer; or

a body corporate referred to in paragraph 21G(3)(b); or

a person referred to in paragraph 21G(3)(c); or

an entity or adviser referred to in paragraph 21N(2)(a).

assessing an application for commercial credit made by the person to the provider; or

collecting payments that are overdue in relation to commercial credit provided by the provider to the person.

for which an application has been made by an individual to a credit provider, or that has been provided to an individual by a credit provider, in the course of the provider carrying on a business or undertaking as a credit provider; and

that is intended to be used wholly or primarily:

for personal, family or household purposes; or

to acquire, maintain, renovate or improve residential property for investment purposes; or

to refinance consumer credit that has been provided wholly or primarily to acquire, maintain, renovate or improve residential property for investment purposes.

the name of the provider;

whether the provider is a licensee;

the type of consumer credit;

the day on which the consumer credit is entered into;

the terms or conditions of the consumer credit:

that relate to the repayment of the amount of credit; and

that are prescribed by the regulations;

the maximum amount of credit available under the consumer credit;

the day on which the consumer credit is terminated or otherwise ceases to be in force.

assessing an application for consumer credit made by the individual to the provider; or

collecting payments that are overdue in relation to consumer credit provided by the provider to the individual.

that is made, or given, against the individual in proceedings (other than criminal proceedings); and

that relates to any credit that has been provided to, or applied for by, the individual.

that is derived from credit reporting information about the individual that was disclosed to a credit provider by a credit reporting body under Division 2 of Part IIIA; and

that has any bearing on the individual’s credit worthiness; and

that is used, has been used or could be used in establishing the individual’s eligibility for consumer credit.

that is derived by a credit reporting body from credit information about the individual that is held by the body; and

that has any bearing on the individual’s credit worthiness; and

that is used, has been used or could be used in establishing the individual’s eligibility for consumer credit.

credit reporting information about the individual that was disclosed to a credit provider by a credit reporting body under Division 2 of Part IIIA; or

CP derived information about the individual.

credit provided by the provider to a person other than the individual; or

credit for which an application has been made to the provider by a person other than the individual.

an organisation; or

an agency prescribed by the regulations;

eligibility to be provided with consumer credit; or

history in relation to consumer credit; or

capacity to repay an amount of credit that relates to consumer credit.

the individual’s full name; or

an alias or previous name of the individual; or

the individual’s date of birth; or

the individual’s sex; or

the individual’s current or last known address, and 2 previous addresses (if any); or

the name of the individual’s current or last known employer; or

if the individual holds a driver’s licence—the individual’s driver’s licence number.

that is provided in connection with the acquisition, maintenance, renovation or improvement of real property; and

in relation to which the real property is security.

whether to provide insurance to, or the risk of providing insurance to, a credit provider in relation to mortgage credit:

provided by the provider to the individual; or

for which an application to the provider has been made by the individual; or

the risk of the individual defaulting on mortgage credit in relation to which the insurer has provided insurance to a credit provider; or

the risk of the individual being unable to meet a liability that might arise under a guarantee provided, or proposed to be provided, in relation to mortgage credit provided by a credit provider to another person.

a request made under subsection 20T(1) in relation to the information if a notice has not been given under subsection 20U(2) or (3) in relation to the request; or

a request made under subsection 21V(1) in relation to the information if:

the credit reporting body referred to in subsection 20V(3) has been consulted about the request under subsection 21V(3); and

a notice has not been given under subsection 21W(2) or (3) in relation to the request.

a complaint made under section 23A that relates to the information if a decision about the complaint has not been made under subsection 23B(4); or

a matter that relates to the information and that is still being dealt with by a recognised external dispute resolution scheme; or

a complaint made to the Commissioner under Part V that relates to the information and that is still being dealt with.

if the recipient is a mortgage insurer or trade insurer—personal information disclosed to the recipient under Division 2 or 3 of Part IIIA; or

if the recipient is a body corporate referred to in paragraph 21G(3)(b)—credit eligibility information disclosed to the recipient under that paragraph; or

if the recipient is a person referred to in paragraph 21G(3)(c)—credit eligibility information disclosed to the recipient under that paragraph; or

if the recipient is an entity or adviser referred to in paragraph 21N(2)(a)—credit eligibility information disclosed to the recipient under subsection 21N(2).

credit that has been, or is to be, provided by a credit provider; or

the purchase of credit by a credit provider;

assessing the risk in purchasing, by means of a securitisation arrangement, credit that has been provided to, or applied for by:

the individual; or

a person for whom the individual is, or is proposing to be, a guarantor; or

assessing the risk in undertaking credit enhancement in relation to credit:

that is, or is proposed to be, purchased or funded by means of a securitisation arrangement; and

that has been provided to, or applied for by, the individual or a person for whom the individual is, or is proposing to be, a guarantor.

an act done by an individual that involves fraudulently obtaining consumer credit, or attempting fraudulently to obtain consumer credit; or

an act done by an individual that involves fraudulently evading the individual’s obligations in relation to consumer credit, or attempting fraudulently to evade those obligations; or

an act done by an individual if:

a reasonable person would consider that the act indicates an intention, on the part of the individual, to no longer comply with the individual’s obligations in relation to consumer credit provided by a credit provider; and

the provider has, after taking such steps as are reasonable in the circumstances, been unable to contact the individual about the act; and

at least 6 months have passed since the provider last had contact with the individual.

whether to provide insurance to, or the risk of providing insurance to, a credit provider in relation to commercial credit provided by the provider to the individual or another person; or

the risk of a person defaulting on commercial credit in relation to which the insurer has provided insurance to a credit provider.

a bank;

an organisation or small business operator if:

the organisation or operator carries on a business or undertaking; and

a substantial part of the business or undertaking is the provision of credit;

an organisation or small business operator:

that carries on a retail business; and

that, in the course of the business, issues credit cards to individuals in connection with the sale of goods, or the supply of services, by the organisation or operator (as the case may be);

an agency, organisation or small business operator:

that carries on a business or undertaking that involves providing credit; and

that is prescribed by the regulations.

(a) an organisation or small business operator (the supplier) carries on a business or undertaking in the course of which the supplier provides credit in connection with the sale of goods, or the supply of services, by the supplier; and

the repayment, in full or in part, of the amount of credit is deferred for at least 7 days; and

the supplier is not a credit provider under subsection (1);

(a) an organisation or small business operator (the lessor) carries on a business or undertaking in the course of which the lessor provides credit in connection with the hiring, leasing or renting of goods; and

the credit is in force for at least 7 days; and

no amount, or an amount less than the value of the goods, is paid as a deposit for the return of the goods; and

the lessor is not a credit provider under subsection (1);

a real estate agent; or

(b) a general insurer (within the meaning of the Insurance Act 1973); or

an employer of an individual;

in processing an application for credit made to the principal; or

in managing credit provided by the principal;

(a) an organisation or small business operator (the securitisation entity) carries on a business that is involved in either or both of the following:

a securitisation arrangement;

managing credit that is the subject of a securitisation arrangement; and

the securitisation entity performs a task that is reasonably necessary for:

purchasing, funding or managing, or processing an application for, credit by means of a securitisation arrangement; or

undertaking credit enhancement in relation to credit; and

(c) the credit has been provided by, or is credit for which an application has been made to, a credit provider (the original credit provider);

(a) an organisation or small business operator (the acquirer) acquires, whether by assignment, subrogation or any other means, the rights of a credit provider (the original credit provider) in relation to the repayment of an amount of credit; and

the acquirer is not a credit provider under subsection 6G(1);

the individual; or

a person:

who is assisting the individual to deal with a credit reporting body or credit provider; and

who is authorised, in writing, by the individual to make a request in relation to the information under subsection 20R(1) or 21T(1).

a credit provider; or

a mortgage insurer; or

a trade insurer; or

a person who is prevented from being a credit provider by subsection 6G(5) or (6).

payment of a debt owed by one person to another person is deferred; or

one person incurs a debt to another person and defers the payment of the debt.

a hire-purchase agreement; and

a contract, arrangement or understanding of a kind referred to in that subsection that is for the hire, lease or rental of goods, or for the supply of services, other than a contract, arrangement or understanding under which:

full payment is made before, or at the same time as, the goods or services are provided; and

in the case of goods—an amount greater than, or equal to, the value of the goods is paid as a deposit for the return of the goods.

identification information about the individual; or

consumer credit liability information about the individual; or

repayment history information about the individual; or

a statement that an information request has been made in relation to the individual by a credit provider, mortgage insurer or trade insurer; or

the type of consumer credit or commercial credit, and the amount of credit, sought in an application:

that has been made by the individual to a credit provider; and

in connection with which the provider has made an information request in relation to the individual; or

default information about the individual; or

payment information about the individual; or

new arrangement information about the individual; or

court proceedings information about the individual; or

personal insolvency information about the individual; or

publicly available information about the individual:

that relates to the individual’s activities in Australia or the external Territories and the individual’s credit worthiness; and

that is not court proceedings information about the individual or information about the individual that is entered or recorded on the National Personal Insolvency Index; or

the opinion of a credit provider that the individual has committed, in circumstances specified by the provider, a serious credit infringement in relation to consumer credit provided by the provider to the individual.

provided for profit or reward; or

provided, or intended to be provided, for the purposes of assessing an application for consumer credit.

the individual is at least 60 days overdue in making the payment; and

the provider has given a written notice to the individual informing the individual of the overdue payment and requesting that the individual pay the amount of the overdue payment; and

the provider is not prevented by a statute of limitations from recovering the amount of the overdue payment; and

the amount of the overdue payment is equal to or more than:

$150; or

such higher amount as is prescribed by the regulations.

the provider has given the individual written notice of the borrower’s default that gave rise to the individual’s obligation to make the overdue payment; and

the notice requests that the individual pay the amount of the overdue payment; and

at least 60 days have passed since the day on which the notice was given; and

in addition to giving the notice, the provider has taken other steps to recover the amount of the overdue payment from the individual; and

the provider is not prevented by a statute of limitations from recovering the amount of the overdue payment.

in connection with an application for consumer credit made by the individual to the provider; or

in connection with an application for commercial credit made by a person to the provider; or

for a credit guarantee purpose of the provider in relation to the individual; or

for a securitisation related purpose of the provider in relation to the individual.

the insurer has sought information about the individual from a credit reporting body; and

the information was sought in connection with the provision of insurance to a credit provider in relation to mortgage credit provided by the provider to:

the individual; or

a person for whom the individual is, or is proposing to be, a guarantor.

the insurer has sought information about the individual from a credit reporting body; and

the information was sought in connection with the provision of insurance to a credit provider in relation to commercial credit provided by the provider to the individual or another person.

a credit provider has disclosed default information about an individual to a credit reporting body; and

(b) the default information relates to a payment that the individual is overdue in making in relation to consumer credit (the original consumer credit) that has been provided by the provider to the individual; and

because of the individual being so overdue:

the terms or conditions of the original consumer credit that relate to the repayment of the amount of credit are varied; or

(ii) the individual is provided with other consumer credit (the new consumer credit) by a credit provider that relates, wholly or in part, to that amount of credit;

(a) a credit provider is of the opinion that an individual has committed a serious credit infringement in relation to consumer credit (the original consumer credit) provided by the provider to the individual; and

the provider has disclosed the opinion to a credit reporting body; and

because of the provider having that opinion:

the terms or conditions of the original consumer credit that relate to the repayment of the amount of credit are varied; or

(ii) the individual is provided with other consumer credit (the new consumer credit) by a credit provider that relates, wholly or in part, to that amount of credit;

a credit provider has disclosed default information about an individual to a credit reporting body; and

on a day after the default information was disclosed, the amount of the overdue payment to which the information relates is paid;

that is entered or recorded in the National Personal Insolvency Index; and

that relates to:

a bankruptcy of the individual; or

a debt agreement proposal given by the individual; or

a debt agreement made by the individual; or

a personal insolvency agreement executed by the individual; or

a direction given, or an order made, under section 50 of the Bankruptcy Act that relates to the property of the individual; or

an authority signed under section 188 of that Act that relates to the property of the individual.

the presentation of a creditor’s petition against the individual; or

an administration under Part XI of the Bankruptcy Act of the individual’s estate.

whether or not the individual has met an obligation to make a monthly payment that is due and payable in relation to the consumer credit;

the day on which the monthly payment is due and payable;

if the individual makes the monthly payment after the day on which the payment is due and payable—the day on which the individual makes that payment.

whether or not an individual has met an obligation to make a monthly payment that is due and payable in relation to consumer credit; and

whether or not a payment is a monthly payment.

credit reporting information;

CP derived information;

credit reporting information that is de-identified;

a pre-screening assessment.

credit reporting information;

CP derived information;

credit reporting information that is de-identified;

a pre-screening assessment.

credit reporting information; or

CP derived information; or

a pre-screening assessment.

will ensure that the body complies with this Division and the registered CR code; and

will enable the body to deal with inquiries or complaints from individuals about the body’s compliance with this Division or the registered CR code.

the kinds of credit information that the body collects and how the body collects that information;

the kinds of credit reporting information that the body holds and how the body holds that information;

the kinds of personal information that the body usually derives from credit information that the body holds;

the purposes for which the body collects, holds, uses and discloses credit reporting information;

information about the effect of section 20G (which deals with direct marketing) and how the individual may make a request under subsection (5) of that section;

how an individual may access credit reporting information about the individual that is held by the body and seek the correction of such information;

information about the effect of section 20T (which deals with individuals requesting the correction of credit information etc.);

how an individual may complain about a failure of the body to comply with this Division or the registered CR code and how the body will deal with such a complaint.

free of charge; and

in such form as is appropriate.

the credit reporting body collects the credit information about the individual from a credit provider who is permitted under section 21D to disclose the information to the body; and

the body collects the information in the course of carrying on a credit reporting business; and

if the information is identification information about the individual—the body also collects from the provider, or already holds, credit information of another kind about the individual.

the credit reporting body:

collects the credit information about the individual from an entity (other than a credit provider) in the course of carrying on a credit reporting business; and

knows, or believes on reasonable grounds, that the individual is at least 18 years old; and

the information does not relate to an act, omission, matter or thing that occurred or existed before the individual turned 18; and

if the information relates to consumer credit or commercial credit—the credit is or has been provided, or applied for, in Australia; and

if the information is identification information about the individual—the body also collects from the entity, or already holds, credit information of another kind about the individual; and

if the information is repayment history information about the individual—the body collects the information from another credit reporting body that has an Australian link.

a credit reporting body receives credit information about an individual; and

the body did not solicit the information;

the credit reporting body uses the information in the course of carrying on the body’s credit reporting business; or

the use is required or authorised by or under an Australian law or a court/tribunal order; or

the use is a use prescribed by the regulations.

the disclosure is a permitted CRB disclosure in relation to the individual; or

the disclosure is to another credit reporting body that has an Australian link; or

both of the following apply:

the disclosure is for the purposes of a recognised external dispute resolution scheme;

a credit reporting body or credit provider is a member of the scheme; or

both of the following apply:

the disclosure is to an enforcement body;

the credit reporting body is satisfied that the body, or another enforcement body, believes on reasonable grounds that the individual has committed a serious credit infringement; or

the disclosure is required or authorised by or under an Australian law or a court/tribunal order; or

the disclosure is a disclosure prescribed by the regulations.

a credit provider who is a licensee or is prescribed by the regulations; or

a mortgage insurer.

the disclosure is to an entity that is specified in an item of the table and that has an Australian link; and

such conditions as are specified for the item are satisfied.

the credit provider referred to in that item requests the information for the purpose of assessing an application for commercial credit made by a person to the provider; and

the application has not been made in writing.

the provider has an Australian link and is a licensee; and

the direct marketing is about consumer credit that the provider provides in Australia; and

the information is not consumer credit liability information, or repayment history information, about the individual; and

the body uses the information to assess whether or not the individual is eligible to receive the direct marketing communications of the credit provider; and

the individual has not made a request under subsection (5); and

the body complies with any requirements that are set out in the registered CR code.

the credit reporting body discloses the pre-screening assessment for the purposes of the direct marketing by, or on behalf of, the credit provider; and

the recipient of the assessment is an entity (other than the provider) that has an Australian link.

the entity no longer needs the assessment for any purpose for which it may be used or disclosed under section 20H; and

the entity is not required by or under an Australian law, or a court/tribunal order, to retain the assessment.

a credit reporting body holds credit reporting information about an individual; and

the individual believes on reasonable grounds that the individual has been, or is likely to be, a victim of fraud (including identity fraud); and

the individual requests the body not to use or disclose the information under this Division;

the individual expressly consents, in writing, to the use or disclosure of the credit reporting information under this Division; or

the use or disclosure of the credit reporting information is required by or under an Australian law or a court/tribunal order.

starts when the individual makes a request under paragraph (1)(c); and

ends:

21 days after the day on which the request is made; or

if the period is extended under subsection (4)—on the day after the extended period ends.

there is a ban period for credit reporting information about an individual that is held by a credit reporting body; and

before the ban period ends, the individual requests the body to extend that period; and

the body believes on reasonable grounds that the individual has been, or is likely to be, a victim of fraud (including identity fraud);

extend the ban period by such period as the body considers is reasonable in the circumstances; and

give the individual written notification of the extension.

a credit reporting body holds credit reporting information about an individual; and

the information is a government related identifier of the individual;

a credit reporting body holds credit reporting information; and

(b) the information (the de-identified information) is de-identified;

the use or disclosure is for the purposes of conducting research in relation to credit; and

the credit reporting body complies with the rules made under subsection (3).

the kinds of de-identified information that may or may not be used or disclosed for the purposes of conducting the research;

whether or not the research is research in relation to credit;

the purposes of conducting the research;

consultation about the research;

how the research is conducted.

enter into agreements with credit providers that require the providers to ensure that credit information that they disclose to the body under section 21D is accurate, up-to-date and complete; and

ensure that regular audits are conducted by an independent person to determine whether those agreements are being complied with; and

identify and deal with suspected breaches of those agreements.

the body uses or discloses credit reporting information under this Division (other than subsections 20D(2) and 20T(4)); and

the information is false or misleading in a material particular.

from misuse, interference and loss; and

from unauthorised access, modification or disclosure.

enter into agreements with credit providers that require the providers to protect credit reporting information that is disclosed to them under this Division:

from misuse, interference and loss; and

from unauthorised access, modification or disclosure; and

ensure that regular audits are conducted by an independent person to determine whether those agreements are being complied with; and

identify and deal with suspected breaches of those agreements.

giving access would be unlawful; or

denying access is required or authorised by or under an Australian law or a court/tribunal order; or

giving access would be likely to prejudice one or more enforcement related activities conducted by, or on behalf of, an enforcement body.

sets out the reasons for the refusal except to the extent that, having regard to the grounds for the refusal, it would be unreasonable to do so; and

states that, if the access seeker is not satisfied with the response to the request, the access seeker may:

access a recognised external dispute resolution scheme of which the body is a member; or

make a complaint to the Commissioner under Part V.

a credit reporting body holds credit reporting information about an individual; and

the body is satisfied that, having regard to a purpose for which the information is held by the body, the information is inaccurate, out-of-date, incomplete, irrelevant or misleading;

the credit reporting body corrects credit reporting information under subsection (1); and

the body has previously disclosed the information under this Division (other than subsections 20D(2) and 20T(4));

it is impracticable for the credit reporting body to give the notice under that subsection; or

the credit reporting body is required by or under an Australian law, or a court/tribunal order, not to give the notice under that subsection.

the personal information is:

credit information about the individual; or

CRB derived information about the individual; or

CP derived information about the individual; and

the body holds at least one kind of the personal information referred to in paragraph (a).

the period of 30 days that starts on the day on which the request is made; or

such longer period as the individual has agreed to in writing.

another credit reporting body that holds or held the information and that has an Australian link;

a credit provider that holds or held the information and that has an Australian link;

give the individual written notice of the correction; and

if the body consulted an interested party under subsection 20T(3) about the individual’s request—give the party written notice of the correction; and

if the correction relates to information that the body has previously disclosed under this Division (other than subsections 20D(2) and 20T(4))—give each recipient of the information written notice of the correction.

states that the correction has not been made; and

sets out the body’s reasons for not correcting the information (including evidence substantiating the correctness of the information); and

states that, if the individual is not satisfied with the response to the request, the individual may:

access a recognised external dispute resolution scheme of which the body is a member; or

make a complaint to the Commissioner under Part V.

a credit reporting body holds credit information about an individual; and

the retention period for the information ends.

there is a pending correction request in relation to the information; or

there is a pending dispute in relation to the information.

if:

the CRB derived information was derived from 2 or more kinds of credit information; and

the body is required to do a thing referred to in subsection (2) to one of those kinds of credit information;

otherwise—at the same time that the body is required to do a thing referred to in subsection (2) to the credit information from which the CRB derived information was derived.

there is a pending correction request in relation to the information; or

there is a pending dispute in relation to the information.

that is information of a kind referred to in an item of the table; and

that is held by a credit reporting body.

the proposal is withdrawn; or

the proposal is not accepted under section 185EC of the Bankruptcy Act; or

the acceptance of the proposal for processing is cancelled under section 185ED of that Act; or

the proposal lapses under section 185G of that Act.

a credit reporting body holds credit reporting information about an individual; and

the information relates to consumer credit that has been provided by a credit provider to the individual, or a person purporting to be the individual; and

the body is satisfied that:

the individual has been a victim of fraud (including identity fraud); and

the consumer credit was provided as a result of that fraud.

destroy the credit reporting information; and

within a reasonable period after the information is destroyed:

give the individual a written notice that states that the information has been destroyed and sets out the effect of subsection (4); and

give the credit provider a written notice that states that the information has been destroyed.

a credit reporting body destroys credit reporting information about an individual under subsection (2); and

the body has previously disclosed the information to one or more recipients under Subdivision D of this Division;

subsection 20V(3) applies in relation to the information; or

subsection 20V(6) applies in relation to the information.

the use or disclosure is for the purposes of the pending correction request, or pending dispute, in relation to the information; or

the use or disclosure of the information is required by or under an Australian law or a court/tribunal order.

to do a thing referred to in subsection 20V(2) to credit information because of subsection 20V(4); or

to do a thing referred to in subsection 20V(5) to CRB derived information because of subsection 20V(7); or

to destroy credit reporting information under subsection 20Y(2) because of subsection 20Y(3).

credit information;

credit eligibility information;

CRB derived information.

credit information;

credit eligibility information;

CRB derived information.

will ensure that the provider complies with this Division and the registered CR code if it binds the provider; and

will enable the provider to deal with inquiries or complaints from individuals about the provider’s compliance with this Division or the registered CR code if it binds the provider.

the kinds of credit information that the provider collects and holds, and how the provider collects and holds that information;

the kinds of credit eligibility information that the provider holds and how the provider holds that information;

the kinds of CP derived information that the provider usually derives from credit reporting information disclosed to the provider by a credit reporting body under Division 2 of this Part;

the purposes for which the provider collects, holds, uses and discloses credit information and credit eligibility information;

how an individual may access credit eligibility information about the individual that is held by the provider;

how an individual may seek the correction of credit information or credit eligibility information about the individual that is held by the provider;

how an individual may complain about a failure of the provider to comply with this Division or the registered CR code if it binds the provider;

how the provider will deal with such a complaint;

whether the provider is likely to disclose credit information or credit eligibility information to entities that do not have an Australian link;

if the provider is likely to disclose credit information or credit eligibility information to such entities—the countries in which those entities are likely to be located if it is practicable to specify those countries in the policy.

free of charge; and

in such form as is appropriate.

notify the individual of the following matters:

the name and contact details of the body;

any other matter specified in the registered CR code; or

otherwise ensure that the individual is aware of those matters.

(a) that the policy (the credit reporting policy) of the provider that is referred to in subsection 21B(3) contains information about how an individual may access the credit eligibility information about the individual that is held by the provider;

that the credit reporting policy of the provider contains information about how an individual may seek the correction of credit information or credit eligibility information about the individual that is held by the provider;

that the credit reporting policy of the provider contains information about how an individual may complain about a failure of the provider to comply with this Division or the registered CR code if it binds the provider;

that the credit reporting policy of the provider contains information about how the provider will deal with such a complaint;

whether the provider is likely to disclose credit information or credit eligibility information to entities that do not have an Australian link;

if the provider is likely to disclose credit information or credit eligibility information to such entities—the countries in which those entities are likely to be located if it is practicable to specify those countries in the credit reporting policy.

the credit provider:

is a member of a recognised external dispute resolution scheme or is prescribed by the regulations; and

knows, or believes on reasonable grounds, that the individual is at least 18 years old; and

the credit reporting body is:

an agency; or

an organisation that has an Australian link; and

the information meets the requirements of subsection (3).

the information does not relate to an act, omission, matter or thing that occurred or existed before the individual turned 18; and

if the information relates to consumer credit or commercial credit—the credit is or has been provided, or applied for, in Australia; and

if the information is repayment history information about the individual:

the credit provider is a licensee or is prescribed by the regulations; and

the consumer credit to which the information relates is consumer credit in relation to which the provider also discloses, or a credit provider has previously disclosed, consumer credit liability information about the individual to the credit reporting body; and

the provider complies with any requirements relating to the disclosure of the information that are prescribed by the regulations; and

if the information is default information about the individual:

the credit provider has given the individual a notice in writing stating that the provider intends to disclose the information to the credit reporting body; and

at least 14 days have passed since the giving of the notice.

a credit provider has disclosed default information about an individual to a credit reporting body under section 21D; and

after the default information was disclosed, the amount of the overdue payment to which the information relates is paid;

a credit reporting body holds credit reporting information about an individual; and

a credit provider requests the body to disclose the information to the provider for the purpose of assessing an application for consumer credit made to the provider by the individual, or a person purporting to be the individual; and

the body is not permitted to disclose the information because there is a ban period for the information; and

during the ban period, the provider provides the consumer credit to which the application relates to the individual, or the person purporting to be the individual.

the use is for a consumer credit related purpose of the credit provider in relation to the individual; or

the use is a permitted CP use in relation to the individual; or

both of the following apply:

the credit provider believes on reasonable grounds that the individual has committed a serious credit infringement;

the provider uses the information in connection with the infringement; or

the use is required or authorised by or under an Australian law or a court/tribunal order; or

the use is a use prescribed by the regulations.

the disclosure is a permitted CP disclosure in relation to the individual; or

the disclosure is to a related body corporate of the credit provider; or

the disclosure is to:

a person for the purpose of processing an application for credit made to the credit provider; or

a person who manages credit provided by the credit provider for use in managing that credit; or

both of the following apply:

the credit provider believes on reasonable grounds that the individual has committed a serious credit infringement;

the provider discloses the information to another credit provider that has an Australian link, or to an enforcement body; or

both of the following apply:

the disclosure is for the purposes of a recognised external dispute resolution scheme;

a credit provider or credit reporting body is a member of the scheme; or

the disclosure is required or authorised by or under an Australian law or a court/tribunal order; or

the disclosure is a disclosure prescribed by the regulations.

the recipient of the credit eligibility information is another credit provider who is a licensee; or

the disclosure is a permitted CP disclosure within the meaning of section 21L; or

the credit provider discloses the credit eligibility information under paragraph (3)(b), (c), (e) or (f); or

the credit provider discloses the credit eligibility information under paragraph (3)(d) to an enforcement body.

a credit provider is an APP entity; and

the credit eligibility information is a government related identifier of the individual;

the relevant credit reporting information was disclosed to the provider under a provision specified in column 1 of the table for the purpose (if any) specified in that column; and

the provider uses the credit eligibility information for the purpose specified in column 2 of the table.

(a) the disclosure is to another credit provider (the recipient) for a particular purpose; and

the recipient has an Australian link; and

the individual expressly consents to the disclosure of the information to the recipient for that purpose.

must be given in writing unless:

the disclosure of the information to the recipient is for the purpose of assessing an application for consumer credit or commercial credit made to the recipient; and

the application has not been made in writing; and

must be given to the credit provider or recipient.

the provider is acting as an agent of another credit provider that has an Australian link; and

while the provider is so acting, the provider is a credit provider under subsection 6H(1); and

the provider discloses the information to the other credit provider in the provider’s capacity as such an agent.

the provider is a credit provider under subsection 6J(1) in relation to credit; and

(b) the credit has been provided by, or is credit for which an application has been made to, another credit provider (the original credit provider) that has an Australian link; and

the original credit provider is not a credit provider under that subsection; and

the information is disclosed to:

the original credit provider; or

another credit provider that is a credit provider under that subsection in relation to the credit and that has an Australian link; and

the disclosure of the information is reasonably necessary for:

purchasing, funding or managing, or processing an application for, the credit by means of a securitisation arrangement; or

undertaking credit enhancement in relation to the credit.

the disclosure is to another credit provider that has an Australian link; and

both credit providers have provided mortgage credit to the individual in relation to which the same real property forms all or part of the security; and

the individual is at least 60 days overdue in making a payment in relation to the mortgage credit provided by either provider; and

the information is disclosed for the purpose of either provider deciding what action to take in relation to the overdue payment.

either:

the provider has provided credit to the individual; or

the individual has applied to the provider for credit; and

the disclosure is to a person for the purpose of that person considering whether:

to offer to act as a guarantor in relation to the credit; or

to offer property as security for the credit; and

the person has an Australian link; and

the individual expressly consents to the disclosure of the information to the person for that purpose.

if subparagraph (1)(a)(i) applies—the application for the credit was not made in writing; or

if subparagraph (1)(a)(ii) applies—the application for the credit has not been made in writing.

the disclosure is to a person who:

is a guarantor in relation to credit provided by the provider to the individual; or

has provided property as security for such credit; and

the person has an Australian link; and

either:

the individual expressly consents to the disclosure of the information to the person; or

if subparagraph (a)(i) applies—the information is disclosed to the person for a purpose related to the enforcement, or proposed enforcement, of the guarantee.

a mortgage insurance purpose of the insurer in relation to the individual; or

any purpose arising under a contract for mortgage insurance that has been entered into between the provider and the insurer.

the disclosure is to a person or body that carries on a business or undertaking that involves the collection of debts on behalf of others; and

the information is disclosed to the person or body for the primary purpose of the person or body collecting payments that are overdue in relation to:

consumer credit provided by the provider to the individual; or

commercial credit provided by the provider to a person; and

the information is information of a kind referred to in subsection (2).

identification information about the individual; or

court proceedings information about the individual; or

personal insolvency information about the individual; or

if subparagraph (1)(c)(i) applies—default information about the individual if:

the information relates to a payment that the individual is overdue in making in relation to consumer credit that has been provided by the credit provider to the individual; and

the provider does not hold, or has not held, payment information about the individual that relates to that overdue payment.

the disclosure is to a State or Territory authority; and

the functions or responsibilities of the authority include:

giving assistance (directly or indirectly) that facilitates the provision of mortgage credit to individuals; or

the management or supervision of schemes or arrangements under which such assistance is given; and

the information is disclosed for the purpose of enabling the authority:

to determine the extent of the assistance (if any) to give in relation to the provision of mortgage credit to the individual; or

to manage or supervise such a scheme or arrangement.

(a) the disclosure is to one or more of the following (the recipient):

an entity;

a professional legal adviser of the entity;

a professional financial adviser of the entity; and

the recipient has an Australian link; and

subsection (3) applies to the information.

in the process of the entity considering whether to:

accept an assignment of a debt owed to the credit provider; or

accept a debt owed to the provider as security for credit provided to the provider; or

purchase an interest in the provider or a related body corporate of the provider; or

in connection with exercising rights arising from the acceptance of such an assignment or debt, or the purchase of such an interest.

for a disclosure under paragraph 21G(3)(b)—section 22D;

for a disclosure under paragraph 21G(3)(c)—section 22E;

in both cases—the Australian Privacy Principles (other than Australian Privacy Principles 1, 6, 7, 8 and 9.2).

a credit provider discloses credit eligibility information under paragraph 21G(3)(b) or (c) to a related body corporate, or person, that does not have an Australian link; and

the relevant provisions do not apply, under this Act, to an act done, or a practice engaged in, by the body or person in relation to the information; and

the body or person does an act, or engages in a practice, in relation to the information that would be a breach of the relevant provisions if those provisions applied to the act or practice;

a credit provider discloses credit eligibility information under subsection 21M(1) to a person or body that does not have an Australian link; and

the Australian Privacy Principles do not apply, under this Act, to an act done, or a practice engaged in, by the person or body in relation to the information; and

the person or body does an act, or engages in a practice, in relation to the information that would be a breach of the Australian Privacy Principles (other than Australian Privacy Principle 1) if those Australian Privacy Principles applied to the act or practice;

a credit provider refuses an application for consumer credit made in Australia:

by an individual; or

(ii) jointly by an individual and one or more other persons (the other applicants); and

the refusal is based wholly or partly on credit eligibility information about one or more of the following:

the individual;

a person who is proposing to act as a guarantor in relation to the consumer credit;

if the application is an application of a kind referred to in subparagraph (a)(ii)—one of the other applicants; and

a credit reporting body disclosed the relevant credit reporting information to the provider for the purposes of assessing the application.

states that the application has been refused; and

states that the refusal is based wholly or partly on credit eligibility information about one or more of the persons referred to in paragraph (1)(b); and

if that information is about the individual—sets out:

the name and contact details of the credit reporting body that disclosed the relevant credit reporting information to the provider; and

any other matter specified in the registered CR code.

the provider discloses credit information under section 21D; and

the information is false or misleading in a material particular.

the provider uses or discloses credit eligibility information under this Division; and

the information is false or misleading in a material particular.

from misuse, interference and loss; and

from unauthorised access, modification or disclosure.

a credit provider holds credit eligibility information about an individual; and

the provider no longer needs the information for any purpose for which the information may be used or disclosed by the provider under this Division; and

the provider is not required by or under an Australian law, or a court/tribunal order, to retain the information;

giving access would be unlawful; or

denying access is required or authorised by or under an Australian law or a court/tribunal order; or

giving access would be likely to prejudice one or more enforcement related activities conducted by, or on behalf of, an enforcement body.

sets out the reasons for the refusal except to the extent that, having regard to the grounds for the refusal, it would be unreasonable to do so; and

states that, if the access seeker is not satisfied with the response to the request, the access seeker may:

access a recognised external dispute resolution scheme of which the provider is a member; or

make a complaint to the Commissioner under Part V.

a credit provider holds credit information or credit eligibility information about an individual; and

the provider is satisfied that, having regard to a purpose for which the information is held by the provider, the information is inaccurate, out-of-date, incomplete, irrelevant or misleading;

the credit provider corrects credit information or credit eligibility information under subsection (1); and

the provider has previously disclosed the information under:

this Division (other than subsection 21V(4)); or

the Australian Privacy Principles (other than Australian Privacy Principle 4.2);

it is impracticable for the credit provider to give the notice under that subsection; or

the credit provider is required by or under an Australian law, or a court/tribunal order, not to give the notice under that subsection.

applies to the provider in relation to credit information or credit eligibility information that is identification information; but

does not apply to the provider in relation to any other kind of credit information or credit eligibility information.

the personal information is:

credit information about the individual; or

CRB derived information about the individual; or

CP derived information about the individual; and

the provider holds at least one kind of the personal information referred to in paragraph (a).

the period of 30 days that starts on the day on which the request is made; or

such longer period as the individual has agreed to in writing.

a credit reporting body that holds or held the information and that has an Australian link;

another credit provider that holds or held the information and that has an Australian link;

applies to the provider in relation to personal information referred to in paragraph (1)(a) that is identification information; but

does not apply to the provider in relation to any other kind of personal information referred to in that paragraph.

give the individual written notice of the correction; and

if the provider consulted an interested party under subsection 21V(3) about the individual’s request—give the party written notice of the correction; and

if the correction relates to information that the provider has previously disclosed under:

this Division (other than subsection 21V(4)); or

the Australian Privacy Principles (other than Australian Privacy Principle 4.2);

states that the correction has not been made; and

sets out the provider’s reasons for not correcting the information (including evidence substantiating the correctness of the information); and

states that, if the individual is not satisfied with the response to the request, the individual may:

access a recognised external dispute resolution scheme of which the provider is a member; or

make a complaint to the Commissioner under Part V.

will ensure that the recipient complies with this Division and the registered CR code if it binds the recipient; and

will enable the recipient to deal with inquiries or complaints from individuals about the recipient’s compliance with this Division or the registered CR code if it binds the recipient.

the kinds of regulated information that the recipient collects and holds, and how the recipient collects and holds that information;

the purposes for which the recipient collects, holds, uses and discloses regulated information;

how an individual may access regulated information about the individual that is held by the recipient and seek the correction of such information;

how an individual may complain about a failure of the recipient to comply with this Division or the registered CR code if it binds the recipient;

how the recipient will deal with such a complaint.

free of charge; and

in such form as is appropriate.

(a) that the policy (the credit reporting policy) of the recipient that is referred to in subsection 22A(3) contains information about how an individual may access the regulated information about the individual that is held by the recipient, and seek the correction of such information;

that the credit reporting policy of the recipient contains information about how an individual may complain about a failure of the recipient to comply with this Division or the registered CR code if it binds the recipient; and

that the credit reporting policy of the recipient contains information about how the recipient will deal with such a complaint.

a mortgage insurer or trade insurer holds or held personal information about an individual; and

the information was disclosed to the insurer by a credit reporting body or credit provider under Division 2 or 3 of this Part;

for a mortgage insurer—the use is for:

a mortgage insurance purpose of the insurer in relation to the individual; or

any purpose arising under a contract for mortgage insurance that has been entered into between the credit provider and the insurer; or

for a trade insurer—the use is for a trade insurance purpose of the insurer in relation to the individual; or

the use is required or authorised by or under an Australian law or a court/tribunal order.

the mortgage insurer or trade insurer is an APP entity; and

the information is a government related identifier of the individual;

a body corporate holds or held credit eligibility information about an individual; and

the information was disclosed to the body by a credit provider under paragraph 21G(3)(b);

the credit provider that has provided the relevant credit to the individual;

the credit provider to which the relevant application for credit was made by the individual.

the body corporate is an APP entity; and

the information is a government related identifier of the individual;

a person holds or held credit eligibility information about an individual; and

the information was disclosed to the person by a credit provider under paragraph 21G(3)(c);

the person uses the information for the purpose for which it was disclosed to the person under paragraph 21G(3)(c); or

the use is required or authorised by or under an Australian law or a court/tribunal order.

the disclosure is to the credit provider; or

the disclosure is required or authorised by or under an Australian law or a court/tribunal order.

the person is an APP entity; and

the information is a government related identifier of the individual;

(a) any of the following (the recipient) holds or held credit eligibility information about an individual:

an entity;

a professional legal adviser of the entity;

a professional financial adviser of the entity; and

the information was disclosed to the recipient by a credit provider under subsection 21N(2);

for a recipient that is the entity—the information is used for a matter referred to in subsection 21N(3); or

for a recipient that is the professional legal adviser, or professional financial adviser, of the entity—the information is used:

in the adviser’s capacity as an adviser of the entity; and

in connection with advising the entity about a matter referred to in subsection 21N(3); or

the use is required or authorised by or under an Australian law or a court/tribunal order.

the recipient is an APP entity; and

the information is a government related identifier of the individual;

a provision of this Part (other than section 20R or 20T);

a provision of the registered CR code (other than a provision that relates to that section).

a provision of this Part (other than section 21T or 21V);

a provision of the registered CR code (other than a provision that relates to that section) if it binds the credit provider.

must, within 7 days after the complaint is made, give the individual a written notice that:

acknowledges the making of the complaint; and

sets out how the respondent will deal with the complaint; and

must investigate the complaint.

sets out the decision; and

states that, if the individual is not satisfied with the decision, the individual may:

access a recognised external dispute resolution scheme of which the respondent is a member; or

make a complaint to the Commissioner under Part V.

the period of 30 days that starts on the day on which the complaint is made; or

such longer period as the individual has agreed to in writing.

the respondent for the complaint is a credit reporting body; and

the complaint relates to credit information or credit eligibility information that a credit provider holds;

notify the provider of the making of the complaint as soon as practicable after it is made; and

notify the provider of the making of a decision about the complaint under subsection 23B(4) as soon as practicable after it is made.

the respondent for the complaint is a credit provider; and

the complaint relates to:

credit reporting information that a credit reporting body holds; or

credit information or credit eligibility information that another credit provider holds;

notify the body or other provider (as the case may be) of the making of the complaint as soon as practicable after it is made; and

notify the body or other provider (as the case may be) of the making of a decision about the complaint under subsection 23B(4) as soon as practicable after it is made.

a credit reporting body discloses credit reporting information to which the complaint relates under Division 2 of this Part; and

at the time of the disclosure, a decision about the complaint under subsection 23B(4) has not been made;

a credit provider discloses personal information to which the complaint relates under Division 3 of this Part or under the Australian Privacy Principles; and

at the time of the disclosure, a decision about the complaint under subsection 23B(4) has not been made;

it is impracticable for the credit reporting body or credit provider to give the notification under that subsection; or

the credit reporting body or credit provider is required by or under an Australian law, or a court/tribunal order, not to give the notification under that subsection.

the entity obtains credit reporting information; and

the information is obtained from a credit reporting body; and

the entity is not:

an entity to which the body is permitted to disclose the information under Division 2 of this Part; or

an access seeker for the information.

the entity obtains credit reporting information; and

the information is obtained from a credit reporting body; and

the information is obtained by false pretence.

an entity to which the body is permitted to disclose the information under Division 2 of this Part; or

an access seeker for the information.

the entity obtains credit eligibility information; and

the information is obtained from a credit provider; and

the entity is not:

an entity to which the provider is permitted to disclose the information under Division 3 of this Part; or

an access seeker for the information.

the entity obtains credit eligibility information; and

the information is obtained from a credit provider; and

the information is obtained by false pretence.

an entity to which the provider is permitted to disclose the information under Division 3 of this Part; or

an access seeker for the information.

either:

a civil penalty order has been made against the entity for a contravention of a civil penalty provision (other than section 13G); or

the entity is found guilty of an offence against this Part; and

that loss or damage resulted from the contravention or commission of the offence.

the person applies for an order under this section; and

the application is made within 6 years of the day the cause of action that relates to the contravention or commission of the offence accrued.

either:

a civil penalty order has been made against an entity for a contravention of a civil penalty provision (other than section 13G); or

an entity is found guilty of an offence against this Part; and

a person has suffered, or is likely to suffer, loss or damage (including injury to the person’s feelings or humiliation) as a result of the contravention or commission of the offence.

compensate the person, in whole or in part, for that loss or damage; or

prevent or reduce that loss or damage suffered, or likely to be suffered, by the person.

an order directing the entity to perform any reasonable act, or carry out any reasonable course of conduct, to redress the loss or damage suffered by the person; and

an order directing the entity to pay the person a specified amount to reimburse the person for expenses reasonably incurred by the person in connection with the contravention or commission of the offence; and

an order directing the defendant to pay to the person the amount of loss or damage the plaintiff suffered.

the person applies for an order under this section; and

the application is made within 6 years of the day the cause of action that relates to the contravention or commission of the offence accrued.

an APP entity; or

a group of APP entities; or

a body or association representing one or more APP entities.