Skip to main content
Rules Mate

Do credit licensees and mortgage brokers need to comply with credit reporting obligations (Part IIIA Privacy Act)?

A computed answer from the Rules Mate applicability engine, with the exact condition, the outcome for every structure and size, and the primary source.

Short answer: Yes

Yes. This obligation applies to credit licensees and mortgage brokers whatever their structure or size. The deciding fact: Credit licensee industry.

The obligation in brief

Comply with credit reporting obligations (Part IIIA Privacy Act). Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2014 govern handling of consumer credit information. Credit providers must give s 21D notices, observe permitted disclosures, treat repayment history information correctly, handle financial hardship requests under s 21D and the FHI regime (from 1 July 2022), and respond to corrections within statutory periods.

Trigger: Providing or receiving consumer credit information.

Why credit licensees & mortgage brokers get a different answer

Rules Mate runs its applicability engine across 9 business structures and 6 size bands for each of the 35 industries it maps. For 33 of those industries the answer for "Comply with credit reporting obligations (Part IIIA Privacy Act)" is no. Credit licensees & mortgage brokers is one of the 2 where the answer is different: yes.

The deciding fact for credit licensees and mortgage brokers: Credit licensee industry.

About the industry: ACL holders and mortgage brokers under the NCCP Act.

Compare a professional services (general) business with 6–19 employees structured as a Pty Ltd company: the obligation does not apply (Requires credit reporting activity or credit activity).

Answer by business structure and size

Each cell is the engine's outcome for a business in credit licensees & mortgage brokers with that structure and size, assuming it sells to consumers and small businesses and holds customer contact details. "Check" means the obligation turns on a fact the industry does not settle.

"Comply with credit reporting obligations (Part IIIA Privacy Act)": outcome for credit licensees and mortgage brokers by structure and size
StructureNo employees1–5 employees6–19 employees20–99 employees100–499 employees500+ employees
Sole traderYesYesYesYesYesYes
PartnershipYesYesYesYesYesYes
TrustYesYesYesYesYesYes
Pty Ltd companyYesYesYesYesYesYes
Public companyYesYesYesYesYesYes
Not-for-profit (unregistered)YesYesYesYesYesYes
Registered charityYesYesYesYesYesYes
Super fundYesYesYesYesYesYes
Foreign companyYesYesYesYesYesYes

What the obligation requires

When due
Continuous; specific notification triggers per Part IIIA.
Evidence to keep
CR Code compliance documentation, FHI procedures, notification templates, complaints register.
Maximum penalty
Same penalty regime as broader Privacy Act; CR Code breaches additionally enforceable
Regulator
OAIC
Jurisdiction
Commonwealth (national)

Other obligations where credit licensees & mortgage brokers differ from the norm

Other industries with a non-default answer

Questions

Do credit licensees and mortgage brokers need to comply with credit reporting obligations (Part IIIA Privacy Act)?
Yes. This obligation applies to credit licensees and mortgage brokers whatever their structure or size. The deciding fact: Credit licensee industry.
Is the answer the same for every industry?
No. For 33 of the 35 industries Rules Mate maps, the answer is no. Credit licensees & mortgage brokers is one of 2 industries with a different answer.

Related

Sources

Computed by the Rules Mate applicability engine from the published obligation corpus; facts last checked 3 October 2026. Rules Mate is not a law firm and this is general information, not legal advice. Confirm your position with the regulator source or a qualified adviser before acting.