Section 24A — Privacy Act 1988: Obtaining credit eligibility information from a credit provider

Offences (1) An entity commits an offence if: (a) the entity obtains credit eligibility information; and (b) the information is obtained from a credit provider; and (c) the entity is not: (i) an entity to which the provider is permitted to disclose the information under Division 3 of this Part; or (ii) an access seeker for the information. Penalty: 200 penalty units. (2) An entity commits an offence if: (a) the entity obtains credit eligibility information; and (b) the information is obtained from a credit provider; and (c) the information is obtained by false pretence. Penalty: 200 penalty units. Civil penalties (3) An entity must not obtain credit eligibility information from a credit provider if the entity is not: (a) an entity to which the provider is permitted to disclose the information under Division 3 of this Part; or (b) an access seeker for the information. Civil penalty: 2,000 penalty units. (4) An entity must not obtain, by false pretence, credit eligibility information from a credit provider. Civil penalty: 2,000 penalty units.