{"id":"F2009B00172","name":"Privacy Act 1988 - Determination No. 1991-2 (s.18E(3))","slug":"privacy-act-1988-determination-no-1991-2-s-18e-3","collection":"legislative_instrument","jurisdiction":"commonwealth","status":"repealed","isInForce":false,"actNumber":null,"makingDate":null,"administeringDepartment":null,"currentVersion":{"id":121580,"registerId":"commonwealth-F2009B00172-current","compilationNumber":null,"startDate":"2026-04-03","status":"Repealed","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"1","sectionType":"section","heading":"Privacy Act 1988 - Determination No. 1991-2 (s.18E(3))","content":"---\nmeta-content-style-type: text/css\nmeta-content-type: application/xhtml+xml; charset=utf-8\nmeta-generator: Aspose.Words for .NET 20.2\ntitle: \"Determination under the Privacy Act 1988: 1991 No 2 (s\"\n---\n\n?xml version=\"1.0\" encoding=\"utf-8\" standalone=\"no\"?>\n\nDetermination under the Privacy Act 1988: 1991 No 2 (s.18E(3))\n\nConcerning identifying particulars permitted to be included in a credit information file\n\nUnder s.18E(3) of the Privacy Act 1988, I DETERMINE that:\n\n1. The following kinds of information are reasonably necessary to be included in an individual's credit information file in order to identify the individual:\n\n1. full name, including any known aliases; sex; and date of birth;\n2. a maximum of three addresses consisting of a current or last known address and two immediately previous addresses;\n3. name of current or last known employer; and\n4. driver's licence number.\n\n\n2. This determination shall take effect on 24 September 1991.\n\nDated 11 September 1991\n\nKevin Patrick O'Connor  Privacy Commissioner\n","sortOrder":0}],"analysis":{"kimi_summary":{"_metrics":{"model":"kimi-k2.5","source":"moonshot-batch","completionTokens":2400},"content_quality":"ok","complexity_score":1,"scope_assessment":{"changed":false,"description":"This determination establishes the original scope of identifying particulars permitted in credit files and remains tightly focused on the specific empowerment in s.18E(3) to specify information reasonably necessary for identification."},"complexity_factors":["Very short instrument containing only four specific data categories","No defined terms or interpretation section requiring legal analysis","No conditional logic, exceptions, or cross-references to other legislative provisions","Simple declarative list format with no nested structures"],"plain_english_summary":"This determination sets out the specific personal details that credit reporting agencies are allowed to keep in your credit information file purely to identify you.\n\nIt limits this identifying information to four categories:\n\n- **Core identity**: Your full name (including any known aliases), sex, and date of birth\n- **Residential history**: A maximum of three addresses—your current or last known address, plus your two immediately previous addresses\n- **Employment**: The name of your current or last known employer\n- **ID number**: Your driver's licence number\n\nThis restricts credit bureaus to collecting only what's reasonably necessary to match credit records to the right person, preventing them from holding excessive personal data just for identification purposes."}},"importantCases":[],"_links":{"self":"/api/acts/privacy-act-1988-determination-no-1991-2-s-18e-3","history":"/api/acts/privacy-act-1988-determination-no-1991-2-s-18e-3/history","analysis":"/api/acts/privacy-act-1988-determination-no-1991-2-s-18e-3/analysis","conflicts":"/api/acts/privacy-act-1988-determination-no-1991-2-s-18e-3/conflicts","importantCases":"/api/acts/privacy-act-1988-determination-no-1991-2-s-18e-3/important-cases","documents":"/api/acts/privacy-act-1988-determination-no-1991-2-s-18e-3/documents"}}