The principle of purpose in the treatment of personal data is established to evaluate commercial risk and credit process. This data may only be shared with entities evaluating credit risk, and financial entities processing credit. Data registrars are responsible for proving to a judge that they have been in compliance with all these statutes, and that they have been acting with due diligence.
All persons bearing credit information will have the right to ask for all data stored under their name within the past twelve months. This can be done every four months.