Date: 2 April 2025
Source: Office of the Australian Information Commissioner

On 25 March 2025, the Privacy (Credit Reporting) Code 2025 (CR Code) came into force, making key amendments to the independent review provision set out in s 24(4) of the CR Code. The revision grants the Australian Information Commissioner the authority to extend the timeline for independent review of the CR code by up to two years.

Previously, the Commissioner was required to initiate an independent review of the CR code every four years, which would be set to occur in March 2025. However, the Australian Information Commissioner has decided to exercise this power, extending the next independent review of the CR Code until March 2027, effectively deferring the next review by two years.

This change aims to provide sufficient time for the government to consider the final report of the Review of Australia’s Credit Reporting Framework and to assess the recent completion of the 2021 independent review of the CR Code which gave effect to further variations made to the CR Code in late…