Akta Agensi Pelaporan Kredit 2010
Applies to: Federal Act — see s 13 (Application for registration) · Official text ↗
- Defines key terms like 'credit reporting agency', 'credit information', and 'credit report' (s 2).
- Prohibits carrying on a credit reporting business without registration as a company (s 11).
- Requires agencies to notify customers about the processing of their credit information (s 23).
- Mandates that credit providers disclose the identity of the agency if an unfavourable credit action is taken based on a report (s 28).
- Requires agencies to ensure credit information is accurate, up-to-date, and not misleading (s 29).
- Grants customers the right to access and request corrections to their credit information (ss 30–31).
- Allows complaints to the Registrar and enables the Registrar to issue enforcement notices (ss 35, 39).
- Prohibits the unlawful collection, disclosure, or sale of credit information without consent (s 62).
What this law is
The Credit Reporting Agencies Act 2010 (Akta Agensi Pelaporan Kredit 2010) is numbered Act 710 in the Laws of Malaysia. Where it applies is set out in section 13 (Application for registration).
Its long title, as printed in the official text: An Act to provide for the registration and regulation of persons carrying on credit reporting businesses and for matters connected therewith and incidental thereto.
Read every section, the amendment history and the official copy on our law library page for this Act.
How the Act is arranged
- Part I — Preliminary (ss 1–2)
- Part II — Appointment, functions and powers of registrar (ss 3–10)
- Part III — Registration of credit reporting agencies (ss 11–19)
- Part IV — Management of credit reporting agencies (ss 20–21)
- Part V — Conduct of business of credit reporting agencies (ss 22–31)
- Part VI — Inspection, complaint and investigation (ss 32–40)
- Part VII — Enforcement (ss 41–58)
- Part VIII — Miscellaneous (ss 59–76)
- Part IX — Savings and transitional provisions (s 77)
Part titles are from the official arrangement of sections.
Time limits in this Act
| What | Limit | Section |
|---|---|---|
| Provide confirmation of processing and access to credit information | not later than twenty-one days from the date of receipt of an access request | s 30(1) |
| Inform requestor of action taken on a correction request | not later than twenty-one days from the date of receipt of the correction request | s 31(4) |
| Make an appeal to the Minister against a Registrar's decision | within thirty days from the date of the decision of the Registrar | s 59(2) |
| Make an appeal to the Minister against an enforcement notice | within thirty days after the enforcement notice is served | s 59(2) |
Offences and penalties
| Offence | Penalty (as written in the Act) | Section |
|---|---|---|
| Carrying on a credit reporting business without registration | fine not exceeding one million ringgit or to imprisonment for a term not exceeding three years or to both | s 11(2) |
| Continuing offence of carrying on business without registration | fine not exceeding ten thousand ringgit for each day or part of a day during which the offence continues after conviction | s 11(3) |
| Contravening the notice to customer on processing of credit information | fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both | s 23(4) |
| Contravening the accuracy of credit information requirements | fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both | s 29(4) |
| Failing to comply with an enforcement notice | fine not exceeding two hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both | s 39(8) |
| Unlawfully collecting, disclosing, or selling credit information | fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both | s 62(7) |
Laws cited on this page
| Act 710 | Credit Reporting Agencies Act 2010 Akta Agensi Pelaporan Kredit 2010 | PDF · PDF (BM) · Official ↗ |
Each law links to our mirror page: a copy of the official text captured on a known date, its version history, and the official source. Law library →
Key sections
| Provision | What it says, in plain words |
|---|---|
| s 2 | Defines 'credit reporting agency' as a registered person carrying on such a business, and defines 'credit' to include Islamic financing facilities, loans, hire-purchase, and guarantees. |
| s 11 | States that no person may carry on a credit reporting business unless they are a company and have been registered and issued a certificate by the Registrar. |
| s 23 | Requires a credit reporting agency to inform a customer in writing about the processing of their credit information, including purposes, sources, and rights, as soon as practicable. |
| s 28 | Requires a credit provider to disclose to a customer, upon request, that an unfavourable credit action was based on a credit report and the identity of the agency that provided it. |
| s 29 | Prohibits a credit reporting agency from using or processing credit information without taking reasonable steps to ensure it is accurate, up-to-date, complete, relevant, and not misleading. |
| s 30 | Gives a requestor the right to access their credit information or report within 21 days, subject to certain exceptions such as identity verification or court orders. |
| s 31 | Allows a customer to request corrections to inaccurate credit information, requiring the agency to correct it or suppress it pending verification within 21 days. |
| s 35 | Allows any person or relevant person to make a written complaint to the Registrar about acts or practices of a credit reporting agency that may contravene the Act. |
| s 39 | Empowers the Registrar to serve an enforcement notice on a credit reporting agency to remedy a contravention, potentially directing them to cease processing credit information. |
| s 59 | Allows a person aggrieved by a Registrar's decision to appeal to the Minister within 30 days, with the Minister's decision being final and binding. |
| s 62 | Prohibits knowingly or recklessly collecting, disclosing, or procuring the disclosure of credit information held by an agency without consent, with specific exceptions for crime prevention or legal requirements. |
Worked examples
Facts. Ahmad applies for a car loan and is rejected. He suspects his credit report shows a late payment he has already settled.
The law. Ahmad can request access to his credit information under s 30(1). If he finds the information is inaccurate, he can make a correction request under s 31(1). The agency must correct it or suppress it pending verification under s 31(3).
Outcome. The agency must respond to the access request within 21 days (s 30(1)) and handle the correction request within 21 days (s 31(4)), ensuring the record is accurate (s 29(1)).
Facts. Siti is denied a credit card application. She wants to know if a credit report was the reason and who provided it.
The law. Under s 28, the credit provider must, upon request, disclose that the unfavourable action was based on a credit report and identify the credit reporting agency.
Outcome. Siti can request this information from the credit provider, who is legally required to provide the identity of the agency (s 28).
Facts. A small firm, 'DataCheck', starts selling credit reports to banks without being registered as a credit reporting agency.
The law. Section 11(1) prohibits carrying on a credit reporting business unless the person is a company and registered under s 14(2). Section 11(2) makes this an offence.
Outcome. DataCheck commits an offence and is liable to a fine not exceeding one million ringgit or imprisonment for up to three years (s 11(2)).
Examples are simplified illustrations with invented names; real cases turn on their own facts.
Questions & answers
Who can I complain to if I think a credit reporting agency is treating my data unfairly?
You can make a written complaint to the Registrar (s 35). The complaint must relate to credit information of which you are the customer and may be a contravention of the Act (s 35). The Registrar can then investigate and potentially issue an enforcement notice (s 39).
How long does a credit reporting agency have to give me my credit report?
The agency must provide access to your credit information or report not later than 21 days from the date of receipt of your access request (s 30(1)). If they cannot comply within this period, they must inform you in writing and comply to the extent they are able (s 30(3)).
What happens if I find an error in my credit report?
You can make a correction request in writing to the credit reporting agency (s 31(1)). The agency must take steps to correct the information or suppress it pending verification (s 31(3)). They must inform you of the action taken within 21 days (s 31(4)).
Can a credit provider tell me why they rejected my loan application?
If the rejection was based on a credit report, the credit provider must, upon your request, disclose that the action was based on a credit report and identify the credit reporting agency (s 28). This helps you understand the source of the decision.
Is it illegal for someone to sell my credit information?
Yes, a person who sells credit information commits an offence if they collected it without the consent of the credit reporting agency (s 62(4)). Offering to sell such information is also an offence (s 62(5)).
Can I appeal if the Registrar refuses to register a credit reporting agency?
Yes, a person aggrieved by the Registrar's decision to refuse registration may appeal to the Minister (s 18). The appeal must be made in writing within 30 days of the decision (s 59(2)).
All questions & answers → · Ask your own →
Sources
Related
Consumer rightsPersonal Data Protection Act 2010Consumer Credit Act 2025Moneylenders Act 1951