This code is enforceable in the same manner as the Privacy Act. 

Here is an extract from the Privacy Commission explaining what the changes mean:

"A new change makes it clear that there are stricter controls around marketing and direct marketing. The Code strengthens the direct marketing rule. It prohibits credit reporters from using credit information for marketing and direct marketing. This change also prohibits the use of credit information for marketing by other parties or for credit information to be used for targeted or direct marketing. Credit reporters will also be prohibited from using arrangements or loopholes with related companies to get around the Code or to make uses or disclosures of credit information that would breach the Code. For example, when an individual makes a request for their credit information, a credit reporter would now be prohibited from using that process to obtain consent to disclose identifying information to a third party such as an insurer, debt collector or credit broker. The change makes clearer the Code's prohibition of any use of credit information by a credit reporter 'to facilitate marketing'".