Defaults and the Privacy Act 1988: Your Rights Under Part IIIA

Getting a default listed on your credit file can feel like you have no control over the process. The credit provider makes the decision, the credit reporting body records it, and you are left dealing with the consequences when applying for finance.

But you do have rights. Part IIIA of the Privacy Act 1988 creates specific protections for Australians when credit information is handled incorrectly.

These rights apply when a default is listed with the wrong amount, sent to an old address, recorded against the wrong person, or listed without the proper notification process being followed. Understanding these protections helps you know when a default listing may be worth challenging.

Got a default on your credit file? Lodge it with Default Gone right here, or call us on (02) 5502 7025. $399 flat per consumer per default. We do not guarantee removal — outcomes depend on the facts of each case — but we will prepare and lodge the dispute properly.

What is Part IIIA of the Privacy Act?

Part IIIA is the section of the Privacy Act 1988 that deals specifically with credit reporting. It was added to the Privacy Act in 2014 and sets out rules for how credit providers, credit reporting bodies and other entities can collect, use and disclose credit information.

The key protections under Part IIIA include:

• Accuracy requirements – Credit information must be accurate, up to date and complete
• Correction rights – You can request corrections when information is wrong
• Investigation duties – Credit reporting bodies must investigate correction requests
• Notification requirements – You must be told when certain information is added to your file
• Access rights – You can request copies of your credit file
• Dispute processes – There are formal pathways to challenge incorrect information

How Part IIIA applies to defaults

When it comes to defaults specifically, Part IIIA creates several important protections:

Default notification requirements: Credit providers must send a default notice to your last known address before listing a default. If they send it to the wrong address or fail to send it at all, the listing may breach Part IIIA.

Accuracy obligations: The default amount, date and account details must be recorded correctly. If the credit reporting body lists the wrong amount or wrong date, this may breach the accuracy requirements.

Correction processes: If you believe default information is incorrect, you have the right to request a correction under Part IIIA. The credit reporting body must investigate your request.

Investigation timeframes: Credit reporting bodies must respond to correction requests within 30 days (or longer in complex cases).

Your correction rights under Part IIIA

Section 20T of the Privacy Act gives you the right to request correction of credit information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

When you can request a correction

You may have grounds to request a correction if:

• The default amount is wrong
• The default date is incorrect
• Your personal details are wrong (name, address, date of birth)
• The account number or reference is incorrect
• The default was listed without proper notice
• The default relates to a debt that was already paid
• The default was listed against the wrong person
• The account was opened fraudulently

How to make a correction request

To request a correction under Part IIIA:

1. Contact the credit reporting body directly – Send your request in writing to Equifax, Experian or Illion
2. Explain what is wrong – Be specific about which information you believe is incorrect
3. Provide supporting documents – Include evidence that supports your correction request
4. Request investigation – Ask the credit reporting body to investigate and correct the information

Investigation process

Once you make a correction request, the credit reporting body must:

• Investigate your request within a reasonable time (usually 30 days)
• Contact the credit provider who supplied the information
• Consider the evidence you have provided
• Make a decision about whether the information should be corrected
• Notify you of their decision in writing

Credit reporting body obligations

Under Part IIIA, credit reporting bodies have specific duties when handling credit information and correction requests.

Accuracy obligations

Credit reporting bodies must take reasonable steps to ensure the credit information they hold is:

• Accurate – The facts recorded must be correct
• Up to date – Old or outdated information should be removed or updated
• Complete – The information should not be misleading due to what is left out
• Relevant – The information should relate to your creditworthiness

Investigation duties

When you request a correction, credit reporting bodies must:

• Take your request seriously and investigate properly
• Contact the original information provider (the credit provider)
• Consider all evidence provided
• Make a reasonable decision based on the available information
• Respond within 30 days (or explain why more time is needed)

Notification requirements

If a correction is made, the credit reporting body must:

• Update your credit file
• Notify you that the correction has been made
• If you request it, notify other entities who received the incorrect information

Credit provider obligations

Credit providers also have duties under Part IIIA when they supply default information to credit reporting bodies.

Pre-listing requirements

Before listing a default, credit providers must:

• Send a default notice to your last known address
• Wait at least 14 days after sending the notice
• Ensure the debt is at least $150 and overdue by at least 60 days
• Verify that the account details and amount are correct

Accuracy duties

When supplying default information, credit providers must ensure:

• The amount is correct
• The date is accurate
• Your personal details are up to date
• The account reference is correct
• The default notice was properly sent

Response obligations

When a credit reporting body contacts them about a correction request, credit providers must:

• Respond promptly to investigation requests
• Provide accurate information about the account and default
• Correct any errors they become aware of
• Cooperate with the investigation process

Common Part IIIA breaches in default listings

Based on correction requests and disputes, these are common ways that default listings may breach Part IIIA:

Incorrect personal details

• Wrong name spelling or format
• Outdated address information
• Incorrect date of birth
• Wrong account holder (listing against a guarantor instead of the borrower)

Procedural failures

• Default notice sent to wrong address
• No default notice sent at all
• Insufficient time between notice and listing
• Listing before the debt was 60 days overdue

Amount and date errors

• Wrong default amount recorded
• Incorrect default date
• Listing the total account balance instead of the overdue amount
• Including fees that were not properly disclosed

Paid default issues

• Failing to update the status when default is paid
• Not marking the default as satisfied
• Continuing to report as unpaid after settlement

What to check on your credit file

If you have a default listed, review these details to check for potential Part IIIA breaches:

Personal information accuracy

• Name: Check spelling, format and any name variations
• Address: Verify the address matches where you were living when the default occurred
• Date of birth: Ensure the date is recorded correctly
• Account details: Check the account number or reference matches your records

Default details accuracy

• Amount: Compare the default amount to your account statements
• Date: Verify the default date aligns with when you received any notices
• Status: Check if paid defaults are marked as satisfied or paid
• Account type: Ensure the product type (credit card, personal loan, etc.) is correct

Notification timeline

• Default notice: Check if you received a proper default notice before the listing
• Address accuracy: Verify the notice was sent to your current address at the time
• Timeframe: Ensure enough time passed between the notice and the listing
• Debt age: Confirm the debt was at least 60 days overdue before listing

Supporting documentation

Gather these documents if you plan to request a correction:

• Account statements showing payments or balances
• Correspondence with the credit provider
• Proof of address at the time of the default
• Payment receipts if the default was paid
• Default notices you received (or evidence you did not receive them)

Making a Part IIIA correction request

If you identify potential breaches of Part IIIA, you can request a correction directly from the credit reporting body.

Step 1: Identify the credit reporting body

Check which credit reporting body holds the incorrect information:

• Equifax: Australia’s largest credit reporting body
• Experian: Second major credit reporting body
• Illion: Third major credit reporting body (formerly Dun & Bradstreet)

You may need to request corrections from multiple bodies if they all hold the same incorrect information.

Step 2: Prepare your correction request

Your request should include:

• Identification: Proof of identity documents
• Specific details: Exactly what information you believe is wrong
• Explanation: Why you believe the information is incorrect
• Supporting evidence: Documents that support your correction request
• Preferred outcome: What correction you are requesting

Step 3: Submit the request

Send your correction request:

• In writing: Email or post to the credit reporting body
• Keep copies: Retain copies of all documents sent
• Request acknowledgment: Ask for confirmation that your request was received
• Note the date: Record when you sent the request for timeline purposes

Step 4: Follow up the investigation

During the investigation:

• Wait for contact: The credit reporting body may request additional information
• Respond promptly: Provide any additional documents requested
• Track progress: Follow up if you do not receive updates within 30 days
• Keep records: Document all correspondence during the process

When Part IIIA protections may not help

While Part IIIA provides important protections, there are limitations to what these rights can achieve:

Correctly listed defaults

If a default was:

• Listed with accurate information
• Properly notified to your current address
• Listed following the correct timeframes
• Within the credit provider’s rights to report

Then Part IIIA may not provide grounds for removal, even if you disagree with the listing.

Disputed debts

Part IIIA focuses on the accuracy of information recorded, not whether you owe the underlying debt. If you:

• Dispute owing the debt at all
• Believe the debt was incorrectly calculated
• Think the account was opened fraudulently
• Have other substantive disputes

You may need to resolve these issues directly with the credit provider before or alongside any Part IIIA correction request.

Time limits

Some corrections may not be available if:

• Too much time has passed since the original listing
• The credit provider no longer has records
• Key evidence is no longer available
• The matter has already been investigated and decided

How Default Gone helps

Default Gone helps Australians challenge unfair, incorrect or unlawfully listed defaults. We collect the relevant information, prepare the dispute, lodge it with the credit provider and/or credit reporting body, track the response and explain the outcome in plain English.

The standard Default Gone service is $399 per consumer, per default. There are no stage fees, no success fees and no surprise invoices. The fee covers the work performed, not a sought outcome.

Our Part IIIA process

When we review a default for potential Part IIIA breaches, we:

1. Analyse the listing details against your records and documents
2. Identify potential accuracy issues or procedural failures
3. Prepare correction requests with supporting evidence
4. Lodge requests with the relevant credit reporting bodies
5. Track the investigation and follow up as required
6. Explain the outcome and any further options

We focus on the accuracy and procedural requirements under Part IIIA, not the underlying debt dispute. Where appropriate, we may also pursue other dispute pathways alongside the Privacy Act correction process.

Next steps if you have an incorrect default

If you believe a default on your credit file may breach Part IIIA:

1. Get your credit file from all three credit reporting bodies to check what is recorded
2. Gather documentation about the account, payments and any correspondence
3. Compare the details on your credit file to your records
4. Check our pricing to understand the cost of professional default dispute assistance
5. Start a free credit scan to identify potential issues with your credit file

Don’t assume a default is correctly listed just because a credit provider reported it. Part IIIA gives you rights to challenge inaccurate information, and these rights are worth understanding if a default is affecting your ability to get finance.

Disclaimer

Default Gone is not a law firm and does not provide legal or financial advice. We do not undertaking that a default or judgement will be removed. Outcomes depend on the facts, documents and response from the credit provider, credit reporting body or relevant legal pathway.

Frequently asked questions

What is Part IIIA of the Privacy Act?

Part IIIA is the section of the Privacy Act 1988 that specifically governs credit reporting in Australia. It sets out rules for how credit providers, credit reporting bodies and other entities can collect, use and disclose credit information. Part IIIA includes requirements for accuracy, correction processes, notification duties and investigation procedures when credit information is recorded incorrectly.

Can I use the Privacy Act to remove a correct default?

No, Part IIIA of the Privacy Act focuses on the accuracy of information recorded, not whether the underlying debt was valid. If a default was listed correctly with accurate information, proper notification and following the required procedures, Privacy Act correction rights may not provide grounds for removal. Part IIIA helps when information is inaccurate, outdated, incomplete or misleading.

How long do credit reporting bodies have to investigate correction requests?

Under Part IIIA, credit reporting bodies must investigate correction requests within a reasonable time, which is generally 30 days. In complex cases requiring extensive investigation, they may take longer but must explain why additional time is needed. If they do not respond within 30 days, you can follow up or consider other dispute pathways.

What happens if a credit provider does not cooperate with a Part IIIA investigation?

Credit providers have obligations to respond to investigation requests from credit reporting bodies under Part IIIA. If a credit provider fails to cooperate or provide accurate information during an investigation, this may support your correction request. The credit reporting body should take the lack of cooperation into account when deciding whether to make the correction you requested.

Can I request corrections from multiple credit reporting bodies for the same default?

Yes, if the same incorrect default information appears on files held by multiple credit reporting bodies (Equifax, Experian and Illion), you can request corrections from each of them separately. Each credit reporting body must investigate your request independently, even if they all received the same information from the same credit provider.

Does the Privacy Act apply to court judgements on credit files?

Yes, Part IIIA of the Privacy Act applies to all credit information including court judgements. You have the same correction rights if judgement information is recorded inaccurately. However, court judgements may also require separate legal processes such as setting aside, satisfying or correcting the judgement through the court system, depending on the circumstances.

What evidence should I include with a Privacy Act correction request?

Include any documents that support your claim that the information is incorrect, such as account statements, payment receipts, correspondence with the credit provider, proof of your address when the default occurred, or evidence about notification issues. The more specific evidence you can provide, the better the credit reporting body can investigate your request.

Can I get compensation if my Privacy Act rights were breached?

Part IIIA focuses on correction of inaccurate information rather than compensation. However, in serious cases involving significant breaches of privacy obligations, you may have other legal options. The primary remedy under Part IIIA is having the incorrect information corrected on your credit file.