The Company must, before supplying any credit products or services, obtain an authority from each customer about the way in which the Company is permitted to use the customer’s information and these ways must be consistent with the Australian Privacy Principles and the Credit Reporting Code of Conduct.