35BCredit reporting bodies may use and disclose certain personal information for identity verification purposes

#### 35B Credit reporting bodies may use and disclose certain personal information for identity verification purposes (1) A credit reporting body that receives a verification request from a reporting entity in relation to an individual may: (a) prepare and provide to the reporting entity an assessment in accordance with this section of whether any or all of the following personal information matches (in whole or part) personal information held by the credit reporting body: (i) the individual’s name; (ii) the individual’s residential address; (iii) the individual’s date of birth; and (b) use the personal information about the individual, and personal information held by the credit reporting body that is the names, residential addresses and dates of birth of other individuals, for the purpose of preparing the assessment. (2) An assessment provided under subsection (1) to a reporting entity: (a) must be an overall assessment of the extent of the match between the personal information disclosed by the reporting entity and personal information held by the credit reporting body; and (b) must not include separate assessments of the match between particular categories of that personal information. (3) To the extent that providing an assessment in relation to an individual involves a disclosure of personal information held by the credit reporting body to a person, body or agency other than the individual, the disclosure is taken to be authorised by this Act for the purposes of paragraph 20E(3)(e) of the Privacy Act 1988.