Section 13 — Data Protection Act 2018: Obligations of credit reference agencies

Obligations of credit reference agencies 13 1 This section applies where a controller is a credit reference agency (within the meaning of section 145(8) of the Consumer Credit Act 1974).

2 The controller's obligations under Article 15(1) to (3) of the UK GDPR (confirmation of processing, access to data and safeguards for third country transfers) are taken to apply only to personal data relating to the data subject's financial standing, unless the data subject has indicated a contrary intention.

3 Where the controller discloses personal data in pursuance of Article 15(1) to (3) of the UK GDPR , the disclosure must be accompanied by a statement informing the data subject of the data subject's rights under section 159 of the Consumer Credit Act 1974 (correction of wrong information).