(1) A credit bureau shall not engage in activities other than activities specified in subsection (2) and the Regulations or as approved by the Central Bank in accordance with this Act.
(2) A credit bureau shall engage in the following activities —
(a) compile and maintain databases in respect of data subject information and generate reports from such databases;
(b) store, manage, evaluate, update and disseminate data subject information to subscribers in accordance with this Act and the Regulations;
(c) where applicable, provide a credit information provider a reasonable opportunity to correct any inaccurate, illegal, incomplete or otherwise deficient information contained in the credit file of a data subject kept and maintained by the credit information provider;
(d) develop and make available to subscribers value added products in relation to credit reporting services;
(e) carry out market and statistical research relating to matters set out under this Act and the Regulations;
(f) provide, on a consistent basis, consultancy and training regarding credit reporting including the publication of educational material;
(g) obtain or otherwise process credit information from any specified public register under Schedule 1; and
(h) carry out such other activity as the Central Bank may, from time to time, approve in accordance with this Act and the Regulations.
(3) A credit bureau shall implement appropriate business continuity measures for the purpose of ensuring that its credit reporting services are available to its subscribers without any disruption that causes harm or is likely to cause harm to the rights or interests of its subscribers.