Illion is an Australian credit reporting body and data analytics provider that collects and supplies credit information, risk scores and fraud-detection tools to lenders, businesses and government agencies. In plain terms, Illion acts as a credit bureau for consumers and commercial entities: it compiles credit reports, produces credit scores and analytics, and offers identity and fraud-prevention services that support lending decisions, customer onboarding and portfolio monitoring.
This article explains what Illion does, what you'll find in an Illion credit report, how Illion collects and uses data, your rights to access and correct information, and practical steps for consumers and businesses when interacting with Illion.
Illion's services cover consumer and commercial offerings and enterprise data solutions:
An Illion credit report can include consumer and business information supplied by credit providers, public records, court registers and other permitted sources. Key elements are:
Typical retention periods vary by data type. The table below summarises common retention timeframes used in credit reporting.
| Data type | Typical retention period |
|---|---|
| Repayment history | 24 months |
| Default listings | 5 years |
| Court judgments | 5 years |
| Credit enquiries | Up to 5 years (visible timeframe may vary) |
| Bankruptcy / insolvency records | Up to 5 years |
These timeframes reflect standard practice under the Privacy Act and the Credit Reporting Privacy Code; specific retention and visibility can vary by data type and regulator guidance.
Illion collects data from several lawful sources and processes it for permitted purposes:
Sources
Permitted uses
Legal basis and privacy safeguards
When Illion provides data to a business, the business must have a permitted purpose (for example, to assess your application for credit or to manage fraud risk). Businesses should ensure they have lawful grounds to access a file and comply with notification and consent obligations where required.
You have rights to access and correct information held by Illion, and to complain if issues are not resolved. Main steps:
1. Request your report
You're generally entitled to request a free copy of your credit report from a credit reporting body once every 12 months and in certain circumstances after a credit refusal. Check OAIC guidance on credit reporting: https://www.oaic.gov.au/privacy/your-privacy-rights/credit-reporting/.
Use Illion's credit report request page or contact their customer service by phone or post. Illion's credit reporting policy is here: https://www.illion.com.au/illion-credit-reporting-policy-/.
2. Verify your identity (quick checklist)
3. Dispute and correction process
If you find an error, lodge a dispute with Illion, providing a clear explanation and supporting evidence (statements, payment receipts, court documents). Illion must investigate and respond — typically within 30 days — and correct or annotate your file where appropriate.
If a credit provider supplied the information, Illion will usually refer the dispute to them; both parties must investigate and provide outcomes.
For consumer-facing step-by-step help, see our guides on Credit Report and Default Listing.
4. Escalate unresolved disputes
If you're not satisfied with Illion's response, you can escalate to the Australian Financial Complaints Authority (AFCA): https://www.afca.org.au/.
For privacy-related complaints or broader breaches of the Privacy Act or Credit Reporting Code, contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au/.
Keep copies of your correspondence and evidence when disputing a listing. If a credit provider is the source of the error, contact them directly as well.
Businesses use Illion across onboarding, credit decisions and fraud prevention workflows:
Typical workflow: a customer applies for credit → the business checks identity and credit score via Illion tools → the decision engine applies policy rules (affordability, limits) → monitoring tools trigger alerts if risk thresholds are crossed. Businesses must ensure they have a permitted purpose and, where required, the customer's consent before accessing a consumer credit file, consistent with the Credit Reporting Privacy Code and the Privacy Act 1988.
For leasing or asset finance decisions, businesses often combine Illion data with product-specific workflows. When offering credit products, consider integration with lending workflows and comparison of providers.
Illion operates within a regulated framework. Key legal and policy obligations include:
Illion's published policies include its credit reporting policy: https://www.illion.com.au/illion-credit-reporting-policy-/ and its privacy policy on Illion's website. Businesses using Illion must align internal processes with these codes, ensure staff are trained on permitted uses, and keep records to demonstrate compliance.
Practical steps to obtain your Illion credit report and verify your file:
Checklist for requesting an Illion credit report:
If you are refused credit or adversely impacted by a decision, you may be entitled to a free copy of your report related to that decision — see OAIC and ASIC guidance: https://asic.gov.au/for-consumers/money-and-investing/credit-and-loans/checking-your-credit-report/.
Yes — Illion operates as a credit reporting body (credit bureau) that collects and supplies credit information and analytics.
You can generally request a free copy once every 12 months and in certain circumstances after a credit refusal. Check OAIC guidance for current entitlements: https://www.oaic.gov.au/privacy/your-privacy-rights/credit-reporting/.
Default listings are typically retained for around 5 years from the date of the default listing. Other items have different retention periods (see the table above).
Lodge a dispute with Illion, provide a clear explanation and supporting evidence, and allow the standard investigation period (commonly 30 days). If unresolved, escalate to AFCA or OAIC.
Businesses can access a consumer file only for permitted purposes (for example, assessing a credit application or fraud prevention). They must comply with the Credit Reporting Privacy Code and have lawful grounds to request the file.
Soft enquiries for checking your own report do not affect your score. Hard enquiries from lenders for credit applications may be recorded and can be visible to other lenders for a period.
Confirm the permitted purpose, obtain necessary consents, integrate tools securely, and document policies for use and retention of data. Consider KYC and fraud-detection needs alongside credit assessments.
Aggregated analytics and modelling data are typically anonymised before use for market insights, while individual credit files remain subject to privacy protections.
Illion is Australia's leading credit reporting body, collecting and supplying credit information to lenders, businesses and government agencies. Consumers have clear rights to access, correct and dispute information, with free annual credit reports and established complaint escalation paths through AFCA and OAIC. Businesses using Illion's services must operate within the Privacy Act and Credit Reporting Privacy Code, ensuring permitted purposes and customer consent before accessing files.
This article is general information only and is not legal, tax or financial advice.