CREDIT REPORTING ACT

201728 sectionsFederal Republic of Nigeria

Section 1: objectives of the Act

The objectives of this Act are to-(a) facilitate and promote access to credit and enhance risk management in credit transactions;
(b) promote access to accurate, fair and reliable credit information and to protect the privacy of such information ;
(c) set standards and conditions for the establishment, regulation and
operations ofcredit bureau ;
(d) promote fair and competitive credit reporting system ;
(e) prornote responsibility in the credit rnarket by encouraging responsible
borrowing, avoidance of over-indebtedness and fulfillment of financial
obligations by consumers and discouraging reckless credit granting by credit
providers and contractual default by consumers ; and
(f) facilitate credit information sharing.

Section 2: No operation without a licence and conditions for the grant of a licence.

(1) No person shall establish, operate orconduct business as a credit bureau or otherwise engage in, or perform the functions or activities of a credit bureau, unless such person is licensed by tlre Bank in accordance with the provisions of this Ac
the provisions of this Act
(2) Any person desiring to undertake business as a credit bureau in Nigeria shall apply in writing to the Governor of the central Bank of Nigeria for the grant of a licence and shall accompany the application with such documentation and information as the Bank may, by regulations prescribe.
(3) A person shall not be licensed by the Bank to operate as a Credit Bureau unless such person :
(a) is duly incorporated in Nigeria as a company limited by shares in accordance with the provisions of the Companies and Allied Matters Act Cap C20.LFN. 2004.
(or any replacement thereof) ; and
(b) meets the minimum capital requirements, satisfies such other requirements and procedures as the Bank rnay, by regulations prescribe from time to time.
(4) Upon satisfying the conditions in subsections (I) and (2) of this section,
the Bank shall issue a licence to such person, subject to such terms and
conditions as may be specified by the Bank in the Licence.
(5) Where an application for a licence is refused, the Bank shall state
the reasons for such refusal in a notice of refusal to the applicant, and where
applicable, the Bank may advise the applicant of the necessary actions which
the applicant needs to take before resubmitting a fresh application for a licence
(6) The Bank shall communicate its decision on an application for a
Licence within three months from the date of receipt of the application and all
accompanying documentation and requirements.

Section 3: Functions of Credit Bureaux.

(1) A credit bureaux shall perform the following functions:
(a) creating and maintaining a database of credit and credit-related
information in accordance with the provisions of this Act;
(b) receiving, collating and compiling credit and credit-related information
from Credit Information Providers; Credit Information Users; and such
other persons as the Bank may prescribe;
(c) issuing Credit Reports, and providing other services that relate to Permissible Purposes;
(d) investigating, at the request of a Credit Information User, an application
for credit on behalf of any person to whom an application for a credit based
transaction has been made;
(e) carrying out such other functions and services that are compatible
with the nature of the foregoing activities, provided that the confidentiality
of any information which they obtain in the course of carrying out such
functions or rendering such services shall be maintained in the manner
prescribed under this Act; and
(f) carrying out such other functions and activities as the Bank may by
regulations prescribe.
(2) No credit bureau shall engage in any form of business other th·~n
those referred to in subsection (1 ).
(3) In performing its functions, a credit bureau:
(a) shall not offer an opinion on the creditworthiness or otherwise of a
Data Subject when issuing Credit Reports;
(b) shall implement procedures and systems that ensure that the Credit
Information on its database is updated on an on-going basis, and update its
database as often as necessary in accordance with the nature of the
information stored, or whenever information is provided by a credit
information provider;
(c) shall, where the information reported or submitted to it appears to be
inaccurate, incomplete, misleading, or contains any manifest error, take
reasonable steps to verify the accuracy of such credit information;
(d) shall not include information relating to race, ethnicity, colour, religion
or political affiliation either in its data format or in the Credit Reports or any
other report or feedback that it provides to credit information users;
(e) shall not release or provide credit information to any credit information
user with which it does not have a data exchange agreement, unless the
written or other authenticated consent of the relevant Data Subject has
been obtained and shown to the Credit Bureau (such consent to be in a
form and substance satisfactory to the Credit Bureau) ; and
(f) may charge such fees, as the Bank may approve, for providing
Credit Information.

Section 4: Collaboration with CRMS and Other public Registries.

(1) The Credit Reporting Management System shall continue to perform its regulatory and prudential functions on behalf of the Bank.
(2) In performing its functions, a credit bureau may request for Credit
Information from the CRMS and Other Public Registries, and shall, upon such
request, provide the requested information to the Credit Bureau, and the Credit Bureau may include such information in Credit Reports issued to Credit Information Users.

Section 5: Retention period of Credit Information.

(5) A Credit Bureau shall maintain Credit Information for a period of not
less than 6 years from the date on which such Credit Information was provided
to it or, if later, from the date on which it last provided such information to a
Credit Information User, after which such Credit Information shall be archived
for a further period of 10 years and may thereafter be destroyed by the Credit
Bureau.

Section 6: Obligations of Credit Bureaux.

(1) A Credit Bureau shall at all times:
(a) implement strict data quality control procedures in order to ensure
the quality of its database and the continuity of its services;
(b) utilise the Credit Information collected solely for the purposes allowed under this Act;
(c) adopt measures and procedures to detect the misuse of data held in
its database and ensure the confidentiality and security of such data;
(d) adopt procedures to allow Credit Information Providers to correct data found to be inaccurate, invalid, incomplete or out of date;
(e) provide to the Bank for the purpose of supervision, unrestricted access
to all the Credit Information managed by the Credit Bureau, either through
access to its systems or in other manner stipulated by the Bank;
(f) maintain reasonable and accessible dispute resolution processes and
procedures to allow data subject to request for the correction of Credit
Reports or Credit Information which are alleged to be inaccurate, invalid,
incomplete or outdated; and
(g) issue, at no cost to the Data Subject, a corrected copy of a Credit
Report, either-
(i) at the end of a dispute resolution process challenging the accuracy
of the information in a Credit Report; or
(ii) upon the request of the Data Subject, when the Credit Report of
a Data Subject is found to contain inaccurate, invalid or incomplete data.
(2) A Credit Bureau shall refuse to provide a Credit Report or to perform
any other function if the provision of such report or the performance of
such function contravenes a provision ofthis Act or any other law.

Section 7: Permissible Purposes for accessing Credit Information.

(1) A Credit Information User may only seek credit information from a Credit Bureau for a permissible purpose.
(2) For the purpose of this Act, Permissible Purpose includes-
(a) considering an application for credit by any person or considering a
person's qualification to act as a guarantor for any credit;
(b) reviewing, renewing, restructuring or monitoring of existing credit
facilities;
(c) carrying out employment checks on employees or prospective
employees;
(d) assessing the credit worthiness of a prospective tenant in any lease
or tenancy;
(e) underwriting, reviewing, renewing insurance policies or analysing
insurance claims;
(f) considering applications for credit contracts or other post-paid
services;
(g) taking actions in respect of debt collection, enforcement of a monetary
judgment or enforcement of any other debt;
(h) satisfying a request bya Data Subject to validate the correctness or
otherwise of Credit Information held by a Credit Bureau in respect of such
Data Subject;
(i) providing credit scoring services by Credit Bureaux
(j) complying with any court order to provide Credit Information or where
a person is required by applicable law to provide Credit Information in
respect of any other person
(k) complying with the directive of a regulatory authority or a public body to provide Credit Information
(l) carrying out know-your-customer checks on any person for any
permissible purpose or as may be required by law; and
(m) such other purposes as the Bank may specify or direct.

Section 8: Powers of the Central Bank of Nigeria.

(1) The Bank shall have powers to-
(a) license and regulate Credit Bureaux;
(b) make regulations and issue guidelines on the licensing, management,
ownership and operations of Credit Bureaux and for the general operations
of the credit reporting system in Nigeria;
(c) review, monitor and supervise the operations of Credit Bureaux;
(d) vary or impose fresh or additional conditions on a Licence;
(e) revoke or suspend licences in accordance with the provisions of this
Act;
(f) periodically publish information and statistics on the activities of
Credit Bureaux;
(g) carry out routine or special examination or investigation of the books
and affairs of Credit Bureaux and take appropriate actions as the
circumstances may require following such examinations to ensure that Credit
Bureaux continue to operate optimally and in accordance with this Act;
(h) take measures to protect the interests of data subjects and to generally
protect the integrity of the credit reporting system against abuses;
(i) impose pecuniary and other penalties for the contravention of this
Act;
(j) undertake other activities necessary or exped ient to give full effect to the provisions of this Act; and
(k) perform other functions specified under this Act.
(2) The Bank~ay authorise or instruct any officer or employee of the
Bank to perform any of the functions, exercise any powers, or discharge any
of its duties under this Act, and may either generally or in any particular case,
appoint any person who is not an officer or employee of the Bank, to render
such assistance as the Bank may specify in the exercise of its powers, the
performance of its functions, or the discharge of its duties under this Act, on
behalf and in the name of the Bank.

Section 9: Confidentiality rights of Data Subjects.

(1)
Except this Act provides otherwise, Data Subjects shall have the right to the privacy, confidentiality and protection of their Credit Information.
(2) Notwithstanding any other provision of this Act-
(a)
Credit Information relating to a Data Subject may be disclosed by a credit information provider to a Credit Bureau without the prior consent of the Data Subject to which such information relates;
(b)
a Credit Bureau shall not disclose information relating to a Data
Subject to a Credit Information user except-
(i) it has a data exchange agreement with the Credit Information User and the disclosure is for a permissible purpose, provided that a Credit Bureau shall be entitled to assume that consent has been obtained
by the Credit Information User, unless the Credit Bureau knows, believes or has reasons to believe that such consent has not been obtained;
(ii) written consent of the Data Subject has been obtained by the Credit Information User in accordance with this Act, and provided to the Credit Bureau (such consento be in a form and substance satisfactory
to the Credit Bureau) ; or
(c) a Credit Information User shall not disclose any Credit Information
received from a Credit Bureau to any person or use such information for any purpose other than a permissible purpose, except with the written consent of the Data Subject.
(3) Notwithstanding subsections (I) and (2) or any other provision of
this Act-
(a)
a Credit Bureau, a Credit Information Provider or a Credit lnfonnation
User shall upon written request, disclose any information relating to a Data Subject to :
(i) the Bank,
(ii) any other person pursuant to a court order, or
(iii) where such disclosure is otherwise required under applicabl
(b) the consent of a Data Subject shall not be required to disclose Credit
Information on such Data Subject.where the Data Subject is involved in the
issuance of dishonoured cheques owning to lack of funds or involved in any
other financial or credit-related malpractice and such disclosure is required
for the purpose of investigating or prosecuting such malpractice.
(4) Where consent is obtained under this section, the consent shall be
valid only for the specific transaction or purpose in respect of which it was
obtained and shall lapse immediately after that transaction is consummated or
purpose is satisfied, such that, the consent shall be obtained for subsequent
transaction or purpose.
(5)
For the purpose of this Act any confidentiality obligation owed to a Data Subject by a Credit Information Provider or a Credit Information User (Whether under law or contract) are hereby waived or modified to the extent
required to bring the obligation in conformity with the provisions of this Act.
(6) Data Subjects shall have the following additional rights-
(a) a right to request and obtain, once a year, one free Credit Report
from a Credit Bureau, provided that a Data Subject shall be entitled to, at
any time, request additional Credit Reports on him or her upon payment of
any applicable fee;
(b)
the right to contest the accuracy of information in his or her Credit Report and have same resolved in line with the provisions of this Act, provided that a Data Subject that seeks to contest the accuracy of the
information on the Credit Report must do so within 15 working days of receiving the relevant Credit Report; and
(c) if an application or a transaction involving the Data Subject is declined
based on information in his or her Credit Report, the Data Subject shall be
entitled to be informed by the Credit Information User within 15 working
days the reason for the denial, and to receive a copy of the report from the
Credit Information User at no extra cost.

Section 10: Obligation of Data Subjectsto update information.

The Data Subject shall notify the relevant Credit Information Provider of any change in such Data Subject's demographic data from time to time.

Section 11: Rights of Credit Information providers

A Credit Information Provider shall be entitled-(a) to receive services from a Credit Bureau subject to the execution of a Data Exchange Agreement with the Credit Bureau ; and
(b) subject to the provisions of this Act, to the integrity and protection of data submitted by it to a Credit Bureau.

Section 12: Responsibilities of Credit Information Users.

The obligations of Credit Information Users shall include-(a) protecting the integrity and confidential ity of information obtained on a Data Subject;
(b)
using Credit Reports obtained from a Credit Bureau only for permissible purposes;
(c) furnishing the Data Subject with the contact details ofa credit bureau
that issues a Credit Report on the basis of which the decision to deny an
application or credit transaction was made;
(d) obtaining consent before requesting for the subject from a Credit Bureaux, except in instances where consent can be
dispensed with under section 9 (2) of this Act;
(e) entering into a valid Data Exchange Agreement with a Credit Bureaux
to enable it access or receive Credit Information or other data from such
Credit Bureau: Provided that where a Credit Information User does not
have a data exchange agreement with the relevant Credit Bureau, it may
access such information upon presenting to the Credit Bureau the written
consent of the Data Subject (such consent to be in a form and substance
satisfactory to the Credit Bureau)
(f)
obtaining Credit Report from at least one Credit Bureau before granting any form of credit: Provided that the persons mentioned in paragraphs (viii) and (ix) of the definition of Credit Information Providers,
shall not, in their capacity as Credit Information Users, be obligated to obtain at least a credit report before extending credit or entering into credit based transactions (except where such persons are otherwise regulated
under any applicable law) ; and
(g) fulfilling any other obligations in accordance with any other law
including regulations and guidelines issued by the Bank.

Section 13: Dispute Resolution process.

(1) Where a data subject has any complaint regarding the accuracy,
validity, completeness or otherwise of any credit information or the contents
of a Credit Report, the Data Subject shall submit a complaint in writing (whether
by electronic mail or other written means) to the Credit Information Provider
or Credit Bureau.
(2)
A Credit Information Provider or Credit Bureau shall upon receipt of a complaint investigate, determine and communicate the outcome of the determination of such complaint to the Data Subject within 10 working days
following the receipt of the complaint.
(3) If the complaint is notresolved within -10 working days of receiving
same, the Credit Provider shall immediately (but not more than 3 working days) refer the complaint to the Bank and the Bank shall resolve the complaint within 10 working days of the receipt of the complaint.
(4) If the Bank does not resolve the complaint within ten (10) working
days or a party to the complaint is otherwise dissatisfied with the decision of the Bank, the dissatisfied party shall have a right to proceed to a court of competent jurisdiction for resolution of the dispute.
(5) A dispute shall be deemed resolved where the Credit Information Provider, which provided the contested information, admits that the information is inaccurate, invalid, incomplete or out-of-date and forwards the rectified Credit Report to the Credit Information Provider and the Data Subject.
(6) For the duration of the investigation or resolution of any complaint
under this section, or any other section of this Act, the Credit Information in
the Credit Bureau must indicate that the Data Subject's Credit Information is
under dispute.
(7) Where there are legal liabilities or costs arising from the inaccurate
data as a result of illegal activity, gross negligence, misconduct or reckless
behaviour, the Credit Information Providerorthe Credit Bureau shall be liable,
depending upon their degree of culpability.
(8) A Credit Bureau may claim against the Credit Information Provider
whenever it is held liable for any incorrect, incomplete or out-of-date information
and Credit Information Users shall be held liable in the event of wrongful or
fraudulent use of the Credit Information.

Section 14: Revocation of a licence.

A licence may be revoked by the Bank if the Credit Bureau-(a) ceases to carry on business in line with the terms in the Licence granted for a continuous period of 6 months or any period aggregating 6 months during a continuous period of 12 months;
(b) a winding-up or analogous order has been made against it or a
resolution for voluntary winding-up has been passed or it is otherwise
dissolved;
(c) fails to comply with minimum capital requirements prescribed by the
Bank, from time to time, or to comply with any condition subject to which
the Licence was granted;
(d) fails to commence business within 6 months immediately after the date of issue of a Licence, unless it notifies the Bank of, and the Bank confirms in writing that it is satisfied with the reason for not commencing business withinthatperiod
(e) breaches the provisions of a law which deals with data protection,
computer misuse, or electronic transactions;
(f) obtained the Licence on the premise of wrong, false, misleading
information or concealment of material information which, if known at the
time of evaluation of the application for the Licence, the Bank would not
have granted the Licence
(g) applies to the Bank 'for the revocation of the Licence; or
(h) fails to comply with the provisions of this Act or the regulations,
guidelines or other directives made or issued by the Bank pursuant to this
Act, and the Bank is of the opinion that such failure justifies the revocation
of the Licence.

Section 15: Suspension of a licence.

The Bank may suspend a licence for a specified period if the licensee has engaged in any of the activities justifying a revocation of the Licence under section 14 of this Act, but the Bank is of the opinion that a suspension of the Licence is a more appropriate action to take in the circumstance.

Section 16: Notice of revocation or suspension of a license

(1) Where the Bank proposes to revoke or suspend a licence, it shall before exercising such power, give notice of its intention to the Credit Bureau concerned, and give the Credit Bureau an opportunity to make representations in respect thereof.
(2)
If following such representations, under section (I) the Bank determines that the Licence should be revoked or suspended, the Bank shall give notice in writing of that decision to the Credit Bureau and shall specify in
the notice, the defect, omission or breach which occasioned the revocation or suspension (as the case may be), and make such consequential directives in the notice as the Bank may deem fit to make in the circumstance.
17. The Bank may, in lieu of revoking or suspending a licence, require

Section 17: Actions in lieu of revocation or suspension of licence

The Bank may, in lieu of revoking or suspending a licence, require the Credit Bureau to take such measures to regularise the breach or violation within such time as the Bank may specify and may, in addition, impose monetary penalty or other sanctions as it may consider necessary.

Section 18: Power to make regulations on consequences of revocation of a license

The Bank may, by regulations stipulate, the manner in which the business or affairs of a Credit Bureau which licence has been revoked may be wound up or continued by another person including on matters such as
safeguarding information or data on the Credit Bureau's database, handing over the Credit Bureau's entire database to another person and such other matters as the Bank may deem appropriate to regulate as the consequences of the revocation of a Licence.

Section 19: JURISDICTION

A person who is dissatisfiedwith the decision of the Bank to revoke or suspend a licence may apply to the'Federal High Court for a review of the
decision.

Section 20: Offences upder the Act.

(1) A person who-
(a) contravenes section 2 of this Act or provides credit bureau servicesafter a licence has been revoked or suspended commits an offence under this Act;
(b) intentionally or negligently provides inaccurate, incomplete, misleading
or false information to Credit Bureaux, Credit Information Provider, Credit
Information User or Data Subjects commits an offence under this Act;
(c) intentionally or negligently discloses Credit Information in
contravention of the provisions ofthis Act commits an offence under this
Act;
(d) tampers or alters Credit Information received in such a manner as
incorrectly represents the information received commits an offence under
this Act ;
(e) intentionally or willfully obtains information from a Credit Bureau
under false pretence or for a purpose other than a permissible purpose
commits an offence under this Act;
(f) uses Credit Information for a purpose other than a permissible purpose
commits an offence under this Act;
(g) wrongfully alters, modifies or delete records by a Credit Bureau
from its database commits an offence under this Act;
(h) makes an unauthorised disclosure or use of Credit Information, or
provides Credit Information to any person carrying on the business, or
performing the functions, of a Credit Bureau without a licence commits an
offence under this Act; and
(i) fails, either as Credit Information Provider or a Credit Bureau to
submit or update data within the timeframe stipulated under this Act or
within such other time frame that may be specified by the Bank commits
Ian offence under this Act.
(2) Any person being a director, manager, secretary or other similar
officer of a Credit Bureau who fails to take all reasonable steps to--
(a) secure compliance by the Credit Bureau with the requirements of
this Act; or
(b) correctly represent-information received in any statement submitted
under the provisions of this Act, commits an offence.

Section 21: Fines and Penalties.

(1) A person who commits an offence under section 20 (1)(0) of
this Act shall on conviction be liable to a term of imprisonment not exceeding
lO years or a fine not less than NlO milliion.
(a) contravenes section 2 of this Act or provides credit bureau services after a licence has been revoked or suspended commits an offence under
this Act;
(b)
intentionally or negligently provides inaccurate, incomplete, misleading or false information to Credit Bureaux, Credit Information Provider, Credit Information User or Data Subjects commits an offence under this Act
(c) intentionally or negligently discloses Credit Information in contravention of the provisions ofthis Act commits an offence under this
Act;
(d) tampers or alters Credit Information received in such a manner as
incorrectly represents the information received commits an offence under
this Act ;
(e) intentionally or willfully obtains information from a Credit Bureau
under false pretence or for a purpose other than a permissible purpose
commits an offence under this Act;
(f) uses Credit Information for a purpose other than a permissible purpose
commits an offence under this Act;
(g) wrongfully alters, modifies or delete records by a Credit Bureau
from its database commits an offence under this Act;
(h) makes an unauthorised disclosure or use of Credit Information, or
provides Credit Information to any person carrying on the business, or
performing the functions, of a Credit Bureau without a licence commits an
offence under this Act; and
(i) fails, either as Credit Information Provider or a Credit Bureau to
submit or update data within the timeframe stipulated under this Act or
within such other time frame that may be specified by the Bank commits
Ian offence under this Act.
(2)
Any person who commits an offence under section 20 (1) (b )-(i) of this Act shall on conviction be liable to a fine not less than N 10 milliion.
(3) Any person who commits an offence under section 20 (2) of this Act
shall on conviction be liable to imprisonment for a term of 3 years or a fine
less than N3million.
(4) Notwithstanding any of the provisions of this Act, the Bank may
impose a prescribed monetary penalty or suspend a licence for failure to comply
with any rules, regulations, guidelines or administrative directives made, given
or issued to the Credit Bureaux under this Act.

Section 22: Liability of Directors and other offtcers

Where any offence against any provision of this Act or any regulations
made under this Act have been committed by a body corporate or a firm or
any person who was a director, manager, secretary or other similar officer of
the body corporate or firm purporting to act in such a capacity shall in addition
to the body corporate or firm be deemed to be guilty of that offence unless he
proves that the offence was committed without his consent or connivance and
that he had exercised all such diligence to prevent the commission of the offence as he ought to have exercised, having regard to the nature of his function, in that capacity and all the circumstances.

Section 23: Penalties not otherwise provided for.

Any person who contravenes or fails to comply with any of the
provisions of this Act or any regulations made under this Act for which no
penalty is expressly provided shall, on conviction, be liable to a prescribed monetary penalty or a fine not less than N 10 milliion or imprisonment for a term of 10 years or to both such imprisonment and prescribed monetary penalty.

Section 24: Restrictions on amalgamation, transfers, etc

A Credit Bureau shall not merge with any other entity, sell or
otherwise transfer its Licence or business to any person, and no person
(whether acting directly, through a proxy, nominee, trustee or other indirect
means) shall acquire not more than 25% shareholding in a credit bureau, in
each case without the approval of the Bank.

Section 25: Guidelines to conform with the Act.

Exceptthe Bank replaces or reissues the Guidelines for the Licensing, Operations and Regulation of Credit Bureaux and Credit Bureau Related Transactions in Nigeria, 2013 (in this Act referred to as "the Guidelines"),
from the commencement date of this Act, the Guidelines shall be read in such
manner as to bring its provisions in conformity with this Act.

Section 26: Handover of database to the Bank.

Without prejudice to section 16 of this Act, when-(a) a licence is revoked in accordance with the provisions of this Act; or
(b) a Credit Bureau is liquidated, wound up, dissolved, or otherwise ceases to carry on business: Such Credit Bureau shall immediately, or within such timeframe as the Bank may, by regulations prescribe, hand over its entire database to the Bank.

Section 27: Interpretation.

27. In this Act-
"Bank" means the Central Bank of Nigeria established under section 1
(1) of the Central Bank of Nigeria Act, 2007;
"Consent" means the authorisation by the Data Subject or the Data
Subject's authorised agent indicating an approval to inquire about the Data
Subject's Credit Information from the Credit Bureaux and such authorisation
could be in writing (including by electronic email, fax or letter), verified and
secured telephonic messages or conversations, and other secured and
verified electronic means of consenting, but shall not include oral consent;
"Credit Bureau" means an entity duly licensed under this Act;
"Credit Information" means information bearing on a person's credit
worthiness, credit standing or capacity, and to the history and profile of
such person with regard to credit, assets and any financial obligations,
including such person's demographic data and such other information that
may aid credit decision making;
"Credit Information Providers" means entities that provide or furnish
Credit Information to a Credit Bureau and includes:
(a) banks, specialised banks and other financial institutions (as such
terms are used or defined under the Banks and Other Financial Institutions
Act, Cap B3 Laws of the Federation of Nigeria, 2004 or by the Bank) ;
(b) leasing companies;
(c) insurance companies;
(d) co-operative societies and institutions that offer credit to medium,
small and micro enterprises;
(e) utility companies including electricity companies,
telecommunications companies, and water corporations;
(f) asset management companies ;
(g) Credit Reporting Management System (CRMS) ;
(h) suppliers of goods and providers of services on a post-paid,
deferred or instalment payment basis (except otherwise specifically
mentioned in paragrpahs (a)-(h) above) ; and
(i) other entities that in their ordinary course of business have
relevant information that complies with Permissible Purposes and
serves the purposes of the Credit Bureau, provided that the Bank
may issue directives or guidelines adding or removing any person
mentioned under paragraphs (a)-(h) ;
"Credit Information Users" includes Credit Information Providers
and other persons that are allowed under this Act or any regulations or
guidelines made under this Act to seek Credit Information from a Credit
Bureau for permissible purposes;
"Credit Report" means an electronic or other written report, credit score,
or statement issued by a Credit Bureau and which is used or collected to
serve as a factor in establishing that Data Subject's eligibility for credit or
other service or product provided by a person on credit basis or for other
permissible purposes, and which shall, among other things, all or part of a
Data Subject's Credit Information which is available on such Credit;
"CRMS" means Credit Reporting Management System;
"Licence" means a credit bureau licence issued by the Bank under this
Act;
"Other Public Registries" inc lud e s the Corporate Affairs
Commission; registrar of business entities; land registries; collateral
registries; tax authorities; courts; birth registries; and other publ ic
bodies and registries;
"permissible purpose" means any of the purposes outlined in section 9
of this Act;
"person" includes any individual, company, corporation, unincorporated
association or body (including a partnership, trust, joint venture or
consortium), Government, State, Agency, Organisation or other entity
whether or not having separate legal personality ;
"prescribed monetary penalty" means such monetary penalty that the
Bank, or a court, may prescribe or impose in respect of any offence
committed under this Act;
"working days" means any day other than a Saturday, Sunday, or national
public holiday in Nigeria.

Section 28: Citation.

This Act may be cited as the Credit Reporting Act, 2017. I certify, in accordance with Section 2 (I) of the Acts Authentication Act, Cap. A2, Laws of the Federation of Nigeria 2004, that this is a true copy
of the Bill passed by both Houses of the National Assembly.
MOHAMMED ATABA SANI-OLOMORI
Clerk to the National Assembly
26th Day of May, 2017.
EXPLANATORY MEMORANDUYI
This Act provides for the framework for credit reporting, licensing and
regulation of credit bureaux.