Section 12: Responsibilities of Credit Information Users.

The obligations of Credit Information Users shall include-(a) protecting the integrity and confidential ity of information obtained on a Data Subject;
(b)
using Credit Reports obtained from a Credit Bureau only for permissible purposes;
(c) furnishing the Data Subject with the contact details ofa credit bureau
that issues a Credit Report on the basis of which the decision to deny an
application or credit transaction was made;
(d) obtaining consent before requesting for the subject from a Credit Bureaux, except in instances where consent can be
dispensed with under section 9 (2) of this Act;
(e) entering into a valid Data Exchange Agreement with a Credit Bureaux
to enable it access or receive Credit Information or other data from such
Credit Bureau: Provided that where a Credit Information User does not
have a data exchange agreement with the relevant Credit Bureau, it may
access such information upon presenting to the Credit Bureau the written
consent of the Data Subject (such consent to be in a form and substance
satisfactory to the Credit Bureau)
(f)
obtaining Credit Report from at least one Credit Bureau before granting any form of credit: Provided that the persons mentioned in paragraphs (viii) and (ix) of the definition of Credit Information Providers,
shall not, in their capacity as Credit Information Users, be obligated to obtain at least a credit report before extending credit or entering into credit based transactions (except where such persons are otherwise regulated
under any applicable law) ; and
(g) fulfilling any other obligations in accordance with any other law
including regulations and guidelines issued by the Bank.