Duty to provide access to data
17.—(1)  Upon a data subject’s request, a licensed credit bureau must, within 5 business days after the request or any shorter period that the Authority may specify by written notice, provide the data subject with a copy of the credit report of the data subject.
(2)  Subject to subsection (3), the licensed credit bureau may charge the data subject a fee each time it provides the data subject with a copy of the credit report under subsection (1).
(3)  Despite subsection (2), where —
(a)a data subject (who is an individual) applies for a credit facility from an approved member of a licensed credit bureau; and
(b)the individual requests, within 30 days after the approved member has approved or rejected the application for the credit facility, a credit report about the individual from the licensed credit bureau in relation to the individual’s application,
the licensed credit bureau must, within 5 business days after the request in paragraph (b) or any shorter period that the Authority may specify by written notice, provide the individual with a copy of the credit report free of charge.
(4)  The licensed credit bureau must provide a copy of the credit report mentioned in subsection (1), in one of the following forms at the data subject’s option:
(a)a printed copy to be collected by the data subject at the registered office of the licensed credit bureau;
(b)a printed copy sent by registered post to an address specified by the data subject;
(c)an electronic copy;
(d)an electronic copy sent by electronic mail to an electronic mail address specified by the data subject.
(5)  Any person that contravenes subsection (1), (3) or (4) shall be guilty of an offence and shall be liable on conviction to a fine not exceeding $250,000 and, in the case of a continuing offence, to a further fine not exceeding $25,000 for every day or part of a day during which the offence continues after conviction.