Section 26N — Privacy Act 1988: What is a CR code

(1) A CR code is a written code of practice about credit reporting. (2) A CR code must: (a) set out how one or more of the provisions of Part IIIA are to be applied or complied with; and (b) make provision for, or in relation to, matters required or permitted by Part IIIA to be provided for by the registered CR code; and (c) bind all credit reporting bodies; and (d) specify the credit providers that are bound by the code, or a way of determining which credit providers are bound; and (e) specify any other entities subject to Part IIIA that are bound by the code, or a way of determining which of those entities are bound. (3) A CR code may do one or more of the following: (a) impose additional requirements to those imposed by Part IIIA, so long as the additional requirements are not contrary to, or inconsistent with, that Part; (b) deal with the internal handling of complaints; (c) provide for the reporting to the Commissioner about complaints; (d) deal with any other relevant matters. (4) A CR code may be expressed to apply differently in relation to: (a) classes of entities that are subject to Part IIIA; and (b) specified classes of credit information, credit reporting information or credit eligibility information; and (c) specified classes of activities of entities that are subject to Part IIIA. (5) A CR code is not a legislative instrument.