Credit Reporting & Credit Scores in Australia: Business Owner's Guide

Australia uses comprehensive credit reporting, which allows eligible credit information to include both negative events and repayment-history information. Credit reporting is governed by the Privacy Act, the Privacy (Credit Reporting) Code and related rules.

Major consumer credit reporting bodies include Equifax, Experian and illion. Business credit reporting also uses commercial datasets and providers. The information held can differ between providers because not every credit provider reports identical data to every bureau.

A credit report is the underlying record containing identity information and eligible credit information such as accounts, enquiries and certain repayment/default information. A credit score is a numerical risk indicator generated from data and a scoring model.

There is no single Australian credit score used by every lender. Bureau score ranges differ, and a lender may use a bureau score alongside its own internal assessment. Avoid publishing universal 'good score = approval' claims.

Factors can include repayment history, defaults or serious credit events, the number and recency of credit applications, account history and other information permitted within the Australian credit-reporting framework. Lenders can also assess factors that are not part of a bureau score, such as income, expenses, bank conduct, business performance, asset quality and existing commitments.

Income is therefore important to lending capacity even though it should not be confused with the mechanics of a consumer bureau score.

A credit application can create an enquiry on a credit file. Numerous applications in a short period can concern lenders because they may indicate rapidly increasing credit demand.

Do not rely on a universal Australian '14-day shopping rule' unless the relevant bureau explicitly confirms how its current scoring model treats grouped enquiries. A broker can often reduce unnecessary applications by identifying likely policy fit before lodging credit.

Requesting your own credit report is not the same as applying for credit and should not be treated as a lender credit application. Consumers have rights to access their credit information and request correction of inaccurate information.

Before a significant finance application, checking the reports held by the major bureaus can reveal incorrect identity details, duplicated accounts, outdated information or unfamiliar enquiries.

Different categories of credit information have statutory retention periods and specific reporting rules. Do not reduce these rules to one blanket 'everything stays five years' statement. The retention period depends on the type of information.

Financial hardship information also has specific legal treatment. If this section is expanded, link directly to current OAIC guidance rather than publishing unsupported score-point estimates.

A sole trader's personal and business finances can overlap significantly. Companies have separate legal identities, but directors and guarantors may still have their personal credit assessed when a business seeks finance.

Commercial credit reports can contain information about an entity's payment behaviour, enquiries and adverse events. A lender may consider both the business and the individuals behind it depending on the facility and guarantee structure.

Check your credit reports for errors, make required repayments on time, avoid unnecessary applications, disclose existing liabilities accurately and resolve unexplained adverse information before lodging finance.

There is no legitimate shortcut that guarantees a particular score increase. Be cautious with services promising to 'wipe' accurate negative information from a credit file.

Gather evidence showing why the information is wrong and request correction through the relevant credit provider or credit reporting body. Australian privacy law provides a correction process, and unresolved eligible disputes may be escalated through the appropriate complaints pathway such as AFCA or the OAIC depending on the issue.

Identity theft or unfamiliar accounts should be treated urgently and may require additional protective steps beyond a routine correction request.