(1) A credit bureau shall —
(a) establish, implement and maintain protocols and procedures to ensure that the credit information registered in its database or otherwise processed by it is securely stored and complete and up-to-date at all times;
(b) implement strict quality control procedures to ensure the maximum possible accuracy and completeness of its database;
(c) take all such steps as are necessary to ensure that the data subject information that it processes is up-to-date, reliable, accurate and comprehensive;
(d) implement any other procedures necessary to ensure compliance with this Act;
(e) ensure that the measures, procedures, and steps taken under this subsection are fair, adequate, relevant, and reasonable; and
(f) ensure that the data subject information is disclosed only in accordance with a permissible purpose provided for under section 20.
(2) A credit bureau that contravenes subsection (1) commits an offence and is liable, on summary conviction, to a fine not less than $10 000 but not exceeding $100 000.