(1) An individual may request a credit reporting body to correct personal information about the individual if:
(a) the personal information is:
(i) credit information about the individual; or
(ii) CRB derived information about the individual; or
(iii) CP derived information about the individual; and
(b) the body holds at least one kind of the personal information referred to in paragraph (a).
(2) If the credit reporting body is satisfied that the personal information is inaccurate, out-of-date, incomplete, irrelevant or misleading, the body must take such steps (if any) as are reasonable in the circumstances to correct the information within:
(a) the period of 30 days that starts on the day on which the request is made; or
(b) such longer period as the individual has agreed to in writing.
(3) If the credit reporting body considers that the body cannot be satisfied of the matter referred to in subsection (2) in relation to the personal information without consulting either or both of the following (the interested party ):
(a) another credit reporting body that holds or held the information and that has an Australian link;
(b) a credit provider that holds or held the information and that has an Australian link;
the body must consult that interested party, or those interested parties, about the individual's request.
(4) The use or disclosure of personal information about the individual for the purposes of the consultation is taken, for the purposes of this Act, to be a use or disclosure that is authorised by this subsection.
(5) The credit reporting body must not charge the individual for the making of the request or for correcting the information.