Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Whether you’re applying for finance, onboarding a new customer on trade terms, or simply planning ahead, understanding credit checks in Australia can save you time, money and headaches.
In this guide, we’ll walk through how credit reporting works, how to get your own report for free, what’s legally required if you want to check someone else, and the documents and processes businesses should have in place to stay compliant.
We’ll keep it practical and in plain English so you can move forward with confidence.
What Is A Credit Check In Australia?
A credit check is a look at someone’s credit history to help predict how reliably they’re likely to pay money they owe. It’s used by lenders and other organisations to manage financial risk.
- Personal credit check: You request your own credit report and score from a credit reporting body to see what lenders see.
- Commercial credit check: A business obtains information about a company (or, in some cases, an individual sole trader or partner) to assess credit risk before offering payment terms or finance.
Common situations where credit checks are used include loan or credit card applications, post-paid phone plans and utilities, and business trade accounts. Landlords and employers sometimes ask for financial background information too, but access to consumer credit reports is tightly controlled (more on that below).
How Credit Reporting Works (And Who Can Access Your Report)?
In Australia, credit reporting is regulated under Part IIIA of the Privacy Act 1988 (Cth) and the Privacy (Credit Reporting) Code (CR Code), which is overseen by the Office of the Australian Information Commissioner (OAIC).
Licensed credit reporting bodies (CRBs) such as Equifax, Experian and illion compile your credit file and score from information supplied by credit providers and public records. That file may include applications for credit, repayment history, defaults, serious credit infringements, and some court judgments.
Soft vs Hard Enquiries
- Soft enquiry: A check that doesn’t impact your score (for example, when you access your own credit report).
- Hard enquiry: A record created when you formally apply for credit. Multiple hard enquiries in a short period can negatively affect your score.
Who Can Access A Consumer Credit Report?
Access to consumer credit information is limited to specific “permitted purposes” under the Privacy Act and CR Code. In practice, that means:
- Lenders and credit providers can access your report with your consent to assess an application for credit.
- Debt collectors engaged by a credit provider may access information for collection activities, again under strict rules.
- Employers and landlords generally cannot access your consumer credit report unless very specific conditions are met and you have given informed consent. Landlords often use tenancy databases (separate from consumer credit reports), and employers should only consider financial checks where it’s relevant to the role and lawful with consent.
Regardless of the context, consent and a lawful purpose are key. If you’re a business handling any personal information, you’ll need a clear, accessible Privacy Policy that explains how you collect and use credit-related data.
Step-By-Step: Get Your Personal Credit Report
You’re entitled to a free copy of your consumer credit report from each major CRB every three months. Checking your own report is a soft enquiry, so it won’t affect your score.
1) Choose A Credit Reporting Body
In Australia, the big three are Equifax, Experian and illion. Each holds slightly different data, so it’s common to request reports from more than one.
2) Confirm Your Identity
Have your full name, date of birth and recent addresses ready, plus government-issued ID such as a driver’s licence, passport or Medicare card.
3) Request Your Report Online
Complete the CRB’s online form and upload the requested documents. Reports are typically delivered within a few days, and in many cases, instantly.
4) Review For Accuracy
Check that your personal details, open and closed accounts, repayment histories and any defaults are correct. If you spot something wrong or unfamiliar, act promptly to have it investigated and corrected (see the correction process below).
Pro tip: Plan ahead
If you’re preparing for a major application (like a home loan or business finance), check your report a couple of months in advance. That gives you time to correct errors before a lender assesses your application.
How To Check A Customer, Supplier Or Tenant (The Right Way)
Many Australian businesses extend credit in everyday ways - offering 14, 30 or 60-day terms, for example. A sensible credit assessment process helps protect your cash flow and reduce bad debts, but it needs to be done lawfully.
Credit Checking Businesses (Companies)
When you assess a company customer, you’re generally dealing with commercial credit information, not a consumer credit report about an individual. Commercial reports can show things like ASIC status, court actions, payment histories and insolvency notices.
To strengthen your position when you offer trade terms, consider registering a security interest over goods or equipment on the PPSR where appropriate. If you’re new to this, this overview explains what the PPSR is and why businesses use it.
Credit Checking Individuals (Sole Traders/Partners/Guarantors)
If you want to assess an individual’s creditworthiness (for example, a sole trader customer or a director who provides a personal guarantee), the Privacy Act and CR Code apply. In plain terms:
- You need the person’s informed, written consent to obtain their consumer credit report.
- Your collection and use must be for a permitted purpose (e.g. assessing an application for credit).
- You must handle the information in line with your Privacy Policy and keep it secure.
The simplest way to cover these bases is to build clear consent wording and credit evaluation rights into your onboarding documents. Many businesses do this in their Credit Application Terms and their standard Terms of Trade.
Landlords And Employers
Landlords typically use tenancy databases and references. Accessing a consumer credit report requires consent and a permitted purpose, and you should only collect what’s reasonably necessary.
Employers should be cautious about financial checks. They’re generally only appropriate where the role has significant financial responsibility, must be done with explicit consent, and must comply with privacy and workplace laws.
Practical Steps For Businesses
- Decide what credit information you genuinely need to assess risk for your product or service.
- Update your application forms to include clear consent wording for any individual checks and personal guarantees.
- Use a reputable provider for commercial credit reports and company searches.
- Document your decision-making (e.g. internal credit limits and escalation triggers) and review it periodically.
Credit Checks For Businesses: Compliance, Contracts And Good Practice
If your operations involve credit assessments or handling personal information, there are a few legal and practical foundations we recommend you get right from day one.
Know The Rules That Apply
- Privacy Act & CR Code: These set the framework for collecting, using, disclosing and correcting consumer credit information. If you handle credit information about individuals, expect to follow strict rules on consent, permitted purposes, storage and correction rights.
- Australian Consumer Law (ACL): The ACL still applies to your customer communications and terms (for example, avoiding misleading statements about credit terms or fees), even though credit reporting itself is governed primarily by the Privacy Act and CR Code.
Adopt The Right Documents
- Privacy Policy: Explains how you collect, use and store personal information, including any credit information you handle. A clear Privacy Policy is essential and is often legally required.
- Credit Application Terms: Sets out your assessment process, consent to credit checks, personal guarantees (if required), and your rights if invoices go unpaid. You can standardise this with tailored Credit Application Terms.
- Terms of Trade/Business Terms: Defines payment timeframes, interest on late payments, retention of title, set-off and other protections in your day-to-day supply. Many businesses rely on robust Terms of Trade or Business Terms.
- Security Interests: If you supply goods on credit, consider retention of title and registering a security interest on the PPSR. You can read why the PPSR matters for your business or look at how to register a security interest.
Handle Corrections And Complaints
Under the Privacy Act and CR Code, individuals have the right to request corrections if credit information about them is inaccurate, out-of-date or incomplete. Build a simple internal process so you can acknowledge, investigate, and respond within the required timeframes.
If you receive a privacy complaint, document how you’ll assess and respond. Having a clear privacy complaint handling procedure and a designated contact point will help you resolve issues quickly and reduce risk.
Be Ready For Incidents
If you hold personal information, think about how you would respond to a data incident. A practical Data Breach Response Plan helps you act quickly and meet any notification obligations if things go wrong.
When To Get Help
If you’re unsure whether your use of credit information is lawful, or you’re setting up consent and onboarding forms for the first time, it’s wise to speak with a data privacy lawyer. Getting the foundations right is far easier than retrofitting your processes later.
Key Takeaways
- Credit reporting in Australia is regulated by Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code, with strict rules around consent, permitted purposes and corrections.
- You can get a free personal credit report from each major credit reporting body every three months; checking your own report is a soft enquiry and won’t affect your score.
- Businesses should use commercial credit reports to assess company customers, and must get informed consent before accessing an individual’s consumer credit information.
- Protect your business with the right paperwork: a clear Privacy Policy, strong Credit Application Terms, and Terms of Trade that set out payment and enforcement rights.
- If you supply on credit, consider retention of title and registering a security interest on the PPSR to reduce the risk of non-payment.
- Have practical processes for handling correction requests, privacy complaints and data incidents so you can respond quickly and compliantly.
If you would like a consultation on the legal obligations of credit checks in Australia, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.







