Credit Provider Determination No. 2011-3 (Indigenous Business Australia)

Administered by Attorney-General's Department

Legislation au F2011L01649 Not in force Legislative Instrument

Legislation content

 

 

 

 

 

 

 

 

Explanatory Statement

Credit Provider Determination

 

 

No. 2011-3 (Indigenous Business Australia)

 

 

August 2011

 

 

 

 

 

 

 

 

Explanatory Statement

Credit Provider Determination No. 2011-3 (Indigenous Business Australia)

This explanatory statement fulfils the Privacy Commissioner’s obligations under section 26(1) of the Legislative Instruments Act 2003 (Cth).

This explanatory statement refers to Credit Provider Determination No. 2011-3 (Indigenous Business Australia) (the IBA Determination) made under section 11B(1)(d)(ii) of the Privacy Act 1988 (Cth) (the Privacy Act).

Purpose and operation

The IBA Determination has effect from 31 October 2011 to 30 October 2014. It has the same effect as Credit Provider Determination No. 2006-5 (Indigenous Business Australia) (the 2006 IBA Determination) which expires on 30 October 2011.

The IBA Determination determines that Indigenous Business Australia (IBA), an agency that carries on a business or undertaking that involves the making of loans, is a credit provider for the purposes of the Privacy Act.

The purpose of the IBA Determination is to determine that IBA is a ‘credit provider’ for the purposes of the Privacy Act. By being determined as a credit provider for the purposes of the Privacy Act, IBA is permitted to conduct credit reporting in accordance with Part IIIA of the Privacy Act and the Credit Reporting Code of Conduct[1]. For example, it can access credit reports held by credit reporting agencies for particular purposes, including assessing a loan application, collecting a payment on an overdue loan, listing an overdue payment or serious credit infringement in relation to a loan and making corrections or additions to information previously reported in relation to a loan.

Authority for making the determination

The authority to make the IBA Determination is contained in sections 11B(1)(d) and 28A(1)(d) of the Privacy Act.

Section 11B(1)(d) of the Privacy Act states:

(1)   For the purposes of this Act…a person is a credit provider if the person is:

(d)     an agency that:

(i)        carries on a business or undertaking that involves the making of loans; and

(ii)      is determined by the Commissioner to be a credit provider for the purposes of this Act.

Section 28A(1) of the Privacy Act states that the Commissioner has the following function in respect of credit reporting:

(d)     to make such determinations as the Commissioner is empowered to make under section 11B or Part IIIA.

Section 6 of the Privacy Act defines ‘Commissioner’ to mean ‘the Information Commissioner within the meaning of the Australian Information Commissioner Act 2010’.

Section 12 of the Australian Information Commissioner Act 2010 (Cth) (AIC Act) provides that the Privacy Commissioner has the ‘privacy functions’ (which are defined in section 9(1)). However, section 12(4)(f) of the AIC Act provides that the Privacy Commissioner may only undertake the making, variation or revocation of a determination for the purposes of paragraph 28A(1)(d) of the Privacy Act with the approval of the Australian Information Commissioner.

The IBA Determination has been made by the Privacy Commissioner. For the purposes of section 12(4)(f) of the AIC Act, the Australian Information Commissioner has approved the Privacy Commissioner making the IBA Determination.

Background to the IBA Determination

IBA is a statutory authority established under Part 4 of the Aboriginal and Torres Strait Islander Act 2005 (Cth). As a federal government agency, it is also subject to the Privacy Act.

The functions of IBA include administration of the Home Ownership Program and Business Development and Assistance Program. Responsibility for these two programs was transferred to IBA from the Aboriginal and Torres Strait Islander Commission in 2005.

IBA first applied for a Credit Provider Determination in 2005 and a determination was issued in October 2005 for one year. The 2006 IBA Determination was issued without substantive change in October 2006 for a period of five years.

Earlier related Credit Provider Determinations were made in 1999 (Aboriginal and Torres Strait Islander Commission), 2003 (Aboriginal and Torres Strait Islander Services) and 2004 (Department of Employment and Workplace Relations). These determinations are no longer in force.

At the time of making this Determination, the Senate Finance and Public Administration Committee is conducting an inquiry into exposure drafts of Australian Privacy Amendment Legislation, including an exposure draft of proposed new credit reporting provisions (Senate Committee inquiry).

If the new credit reporting provisions are passed in their current exposure draft form, the IBA Determination is likely to become redundant because:

  • the Australian Government proposes removing the Australian Information Commissioner's determination power in relation to the 'credit provider' definition, and
  • subsection 188(1)(d) of the exposure draft provides that an agency is a credit provider if it carries on a business or undertaking that involves providing credit and it is prescribed by the regulations (which are yet to be released).

It appears that IBA may need to be prescribed in the regulations in order to continue to participate in the credit reporting system as a credit provider once the new credit reporting provisions commence.

Consultation

Prior to making the IBA Determination, the Office of the Australian Information Commissioner (OAIC) undertook a review of the 2006 IBA Determination which expires on 30 October 2011.

The OAIC released a consultation paper[2] for public comment as part of the review. The purpose of the public consultation was to obtain stakeholders’ views regarding whether or not a new determination in relation to IBA should be made, whether the terms of the determination should be amended, and the duration of any such determination.

Comment was invited from industry participants, peak industry bodies, consumers groups, Government departments and Indigenous bodies. The consultation paper was available on the OAIC’s website during the consultation period.

The OAIC received four written submissions in response to the consultation paper. The submissions are available on the OAIC website[3].

Reasons for the decision

In making the IBA Determination, the Privacy Commissioner took account of:

  • the operation of the 2006 IBA Determination
  • the submissions received in response to the consultation paper, and
  • the Senate Committee inquiry and the potential impact of the exposure draft of new credit reporting provisions on the IBA Determination.

The Privacy Commissioner was satisfied that there was no reason not to make a new determination in relation to IBA and no reason to amend the terms of the 2006 IBA Determination. The Privacy Commissioner therefore decided to make the IBA Determination, with the same effect as the 2006 IBA Determination, for a period of three years.

The Privacy Commissioner noted:

  • that each submission received by the OAIC supported the making of a new IBA Determination on the same terms as the 2006 IBA Determination
  • that the OAIC received no comments or evidence demonstrating problems with the operation of the 2006 IBA Determination
  • that neither the OAIC nor the former Office of the Privacy Commissioner have received any complaints relating to IBA as a credit provider
  • that IBA itself submits that it has acted in accordance with its obligations under the Privacy Act
  • that IBA continues to perform the same lending functions that it performed when the 2006 IBA Determination was made, and as were performed by the Aboriginal and Torres Strait Islander Commission, the Aboriginal and Torres Strait Islander Services and the Department of Employment and Workplace Relations previously when those bodies were the subject of earlier credit provider determinations. Therefore the same considerations that were deliberated in the previous determinations (in 1999, 2003, 2004, 2005 and 2006) continue to be relevant
  • IBA’s statement that the timely provision of a customer’s credit report to IBA assists a home or business enterprise loan customer to quickly obtain credit by satisfying IBA that he or she has an established credit history and is an acceptable credit risk, and assists that customer to compete with other buyers on an equal footing in purchasing homes or pursuing business opportunities on the open market, and
  • a submission that IBA plays an important role in enabling policy implementation to assist Indigenous Australians to transition into home ownership and pursue entrepreneurial opportunities through the provision of loans and other supports.

 

[1] Credit Reporting Code of Conduct and Explanatory notes issued by the Privacy Commissioner under section 18A of the Privacy Act, September 1991 and including all amendments as at March 1996.

[2] Review of Credit Provider Determination: Consultation Paper No. 2 – Indigenous Business Australia is available at http://www.oaic.gov.au/publications/papers.html.

[3] http://www.oaic.gov.au/news/consultations.html#previous_consultations.

Overview

The Credit Provider Determination No. 2011-3 (Indigenous Business Australia), enacted in August 2011, serves to address the need for the Indigenous Business Australia (IBA) to be recognised as a credit provider under the Privacy Act 1988. This determination was made by the Privacy Commissioner under the authority granted by sections 11B(1)(d) and 28A(1)(d) of the Privacy Act, with approval from the Australian Information Commissioner. The determination ensures that IBA, which carries on a business involving the making of loans, can conduct credit reporting in accordance with the Privacy Act and the Credit Reporting Code of Conduct. This includes accessing credit reports for purposes such as assessing loan applications and collecting overdue payments. The decision to renew the determination for a period of three years was based on the lack of issues raised by the previous determination and stakeholder support for its continuation.

Scope and Application

The Credit Provider Determination No. 2011-3 (Indigenous Business Australia) applies to Indigenous Business Australia (IBA), a federal government agency that provides loans and is designated as a credit provider under the Privacy Act 1988. This determination, effective from 31 October 2011 to 30 October 2014, grants IBA the authority to conduct credit reporting activities, such as accessing credit reports for assessing loan applications, collecting overdue payments, and correcting credit information, in line with Part IIIA of the Privacy Act and the Credit Reporting Code of Conduct. The Privacy Commissioner, who holds the authority to make such determinations, approved this determination with the consent of the Australian Information Commissioner. The IBA Determination follows the expiry of a similar 2006 determination and addresses the potential redundancy of such provisions in the context of new credit reporting amendments under consideration by the Senate Finance and Public Administration Committee.

Key Provisions

The Credit Provider Determination No. 2011-3 (Indigenous Business Australia) (the IBA Determination) primarily serves to classify Indigenous Business Australia (IBA) as a credit provider under the Privacy Act 1988 (Cth). This determination (section 11B(1)(d)(ii)) enables IBA to undertake credit reporting activities, including accessing credit reports for assessing loan applications and managing overdue loans, in accordance with the Privacy Act and the Credit Reporting Code of Conduct. The IBA Determination is effective from 31 October 2011 to 30 October 2014, mirroring the previous determination that expired on 30 October 2011. The IBA Determination imposes several obligations on IBA, primarily ensuring that it adheres to the Privacy Act while conducting its credit-related activities. IBA is required to handle credit information responsibly, ensuring that it only accesses and uses credit reports for legitimate purposes such as loan assessments and debt collection. Additionally, IBA must comply with the Credit Reporting Code of Conduct, which outlines standards for credit reporting practices, including the accuracy, relevance, and security of credit information. The determination also necessitates that IBA maintain records and documentation to demonstrate compliance with these obligations. In terms of legal consequences, any breach of the obligations under the IBA Determination could lead to penalties. The Privacy Act provides for various sanctions, including civil penalties for non-compliance with privacy principles and administrative penalties for breaches related to credit reporting. Specifically, under section 13G of the Privacy Act, an organisation can be fined up to $1.8 million for serious or repeated breaches of the Australian Privacy Principles. Furthermore, the determination could result in the revocation of IBA’s credit provider status, thereby affecting its ability to engage in credit reporting activities. The determination may also become redundant if new credit reporting provisions, currently under consideration by the Senate Finance and Public Administration Committee, are enacted and IBA is not prescribed in the relevant regulations.

Legal classification tags

Area of Law
Privacy Law
Instrument
Regulation
Concepts
Definitions & Interpretation
Licensing & Registration
Reporting & Disclosure Obligations

Interactions

Authorises

All Versions

Sourced from the Federal Register of Legislation at 26 August 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au.