个人信用信息基础数据库管理暂行办法 Interim Measures for the

行长　周小川

二00五年八月十八日

个人信用信息基础数据库管理暂行办法

第一章　总则

第一条　为维护金融稳定，防范和降低商业银行的信用风险，促进个人信贷业务的发展，保障个人信用信息的安全和合法使用，根据《中华人民共和国中国人民银行法》等有关法律规定，制定本办法。

第二条　中国人民银行负责组织商业银行建立个人信用信息基础数据库（以下简称个人信用数据库），并负责设立征信服务中心，承担个人信用数据库的日常运行和管理。

第三条　个人信用数据库采集、整理、保存个人信用信息，为商业银行和个人提供信用报告查询服务，为货币政策制定、金融监管和法律、法规规定的其他用途提供有关信息服务。

第四条　本办法所称个人信用信息包括个人基本信息、个人信贷交易信息以及反映个人信用状况的其他信息。

前款所称个人基本信息是指自然人身份识别信息、职业和居住地址等信息；个人信贷交易信息是指商业银行提供的自然人在个人贷款、贷记卡、准贷记卡、担保等信用活动中形成的交易记录；反映个人信用状况的其他信息是指除信贷交易信息之外的反映个人信用状况的相关信息。

第五条　中国人民银行、商业银行及其工作人员应当为在工作中知悉的个人信用信息保密。

第二章　报送和整理

第六条　商业银行应当遵守中国人民银行发布的个人信用数据库标准及其有关要求，准确、完整、及时地向个人信用数据库报送个人信用信息。

第七条　商业银行不得向未经信贷征信主管部门批准建立或变相建立的个人信用数据库提供个人信用信息。

第八条　征信服务中心应当建立完善的规章制度和采取先进的技术手段确保个人信用信息安全。

第九条　征信服务中心根据生成信用报告的需要，对商业银行报送的个人信用信息进行客观整理、保存，不得擅自更改原始数据。

第十条　征信服务中心认为有关商业银行报送的信息可疑时，应当按有关规定的程序及时向该商业银行发出复核通知。

商业银行应当在收到复核通知之日起5个工作日内给予答复。

第十一条　商业银行发现其所报送的个人信用信息不准确时，应当及时报告征信服务中心，征信服务中心收到纠错报告应当立即进行更正。

第三章　查询

第十二条　商业银行办理下列业务，可以向个人信用数据库查询个人信用报告：

（一）审核个人贷款申请的；

（二）审核个人贷记卡、准贷记卡申请的；

（三）审核个人作为担保人的；

（四）对已发放的个人信贷进行贷后风险管理的；

（五）受理法人或其他组织的贷款申请或其作为担保人，需要查询其法定代表人及出资人信用状况的。

第十三条　除本办法第十二条第（四）项规定之外，商业银行查询个人信用报告时应当取得被查询人的书面授权。书面授权可以通过在贷款、贷记卡、准贷记卡以及担保申请书中增加相应条款取得。

第十四条　商业银行应当制定贷后风险管理查询个人信用报告的内部授权制度和查询管理程序。

第十五条　征信服务中心可以根据个人申请有偿提供其本人信用报告。

征信服务中心应当制定相应的处理程序，核实申请人身份。

第四章　异议处理

第十六条　个人认为本人信用报告中的信用信息存在错误（以下简称异议信息）时，可以通过所在地中国人民银行征信管理部门或直接向征信服务中心提出书面异议申请。

中国人民银行征信管理部门应当在收到异议申请的2个工作日内将异议申请转交征信服务中心。

第十七条　征信服务中心应当在接到异议申请的2个工作日内进行内部核查。

征信服务中心发现异议信息是由于个人信用数据库信息处理过程造成的，应当立即进行更正，并检查个人信用数据库处理程序和操作规程存在的问题。

第十八条　征信服务中心内部核查未发现个人信用数据库处理过程存在问题的，应当立即书面通知提供相关信息的商业银行进行核查。

第十九条　商业银行应当在接到核查通知的10个工作日内向征信服务中心作出核查情况的书面答复。异议信息确实有误的，商业银行应当采取以下措施：

（一）应当向征信服务中心报送更正信息；

（二）检查个人信用信息报送的程序；

（三）对后续报送的其他个人信用信息进行检查，发现错误的，应当重新报送。

第二十条　征信服务中心收到商业银行重新报送的更正信息后，应当在2个工作日内对异议信息进行更正。

异议信息确实有误，但因技术原因暂时无法更正的，征信服务中心应当对该异议信息作特殊标注，以有别于其他异议信息。

第二十一条　经过核查，无法确认异议信息存在错误的，征信服务中心不得按照异议申请人要求更改相关个人信用信息。

第二十二条　征信服务中心应当在接受异议申请后15个工作日内，向异议申请人或转交异议申请的中国人民银行征信管理部门提供书面答复；异议信息得到更正的，征信服务中心同时提供更正后的信用报告。

异议信息确实有误，但因技术原因暂时无法更正异议信息的，征信服务中心应当在书面答复中予以说明，待异议信息更正后，提供更正后的信用报告。

第二十三条　转交异议申请的中国人民银行征信管理部门应当自接到征信服务中心书面答复和更正后的信用报告之日起2个工作日内，向异议申请人转交。

第二十四条　对于无法核实的异议信息，征信服务中心应当允许异议申请人对有关异议信息附注100字以内的个人声明。个人声明不得包含与异议信息无关的内容，异议申请人应当对个人声明的真实性负责。

征信服务中心应当妥善保存个人声明原始档案，并将个人声明载入异议人信用报告。

第二十五条　征信服务中心应当对处于异议处理期的信息予以标注。

第五章　安全管理

第二十六条　商业银行应当根据中国人民银行的有关规定，制定相关信用信息报送、查询、使用、异议处理、安全管理等方面的内部管理制度和操作规程，并报中国人民银行备案。

第二十七条　商业银行应当建立用户管理制度，明确管理员用户、数据上报用户和信息查询用户的职责及操作规程。

商业银行管理员用户、数据上报用户和查询用户不得互相兼职。

第二十八条　商业银行管理员用户应当根据操作规程，为得到相关授权的人员创建相应用户。管理员用户不得直接查询个人信用信息。

管理员用户应当加强对同级查询用户、数据上报用户与下一级管理员用户的日常管理。查询用户工作人员调离，该用户应当立即予以停用。

第二十九条　商业银行管理员用户、数据上报用户和查询用户须报中国人民银行征信管理部门和征信服务中心备案。

前款用户工作人员发生变动，商业银行应当在2个工作日内向中国人民银行征信管理部门和征信服务中心变更备案。

第三十条　商业银行应当制定管理员用户和查询用户的口令控制制度，并定期检查口令控制执行情况。

第三十一条　商业银行应当建立保证个人信用信息安全的管理制度，确保只有得到内部授权的人员才能接触个人信用报告，不得将个人信用报告用于本办法第十二条规定以外的其它用途。

第三十二条　征信服务中心应当制定信用信息采集、整理、保存、查询、异议处理、用户管理、安全管理等方面的管理制度和操作规程，明确岗位职责，完善内控制度，保障个人信用数据库的正常运行和个人信用信息的安全。

第三十三条　征信服务中心及其工作人员不得违反法律、法规及本办法的规定，篡改、毁损、泄露或非法使用个人信用信息，不得与自然人、法人、其它组织恶意串通，提供虚假信用报告。

第三十四条　征信服务中心应当建立个人信用数据库内部运行和外部访问的监控制度，监督个人信用数据库用户和商业银行用户的操作，防范对个人信用数据库的非法入侵。

第三十五条　征信服务中心应当建立灾难备份系统，采取必要的安全保障措施，防止系统数据丢失。

第三十六条　征信服务中心应当对商业银行的所有查询进行记录，并及时向商业银行反馈。

第三十七条　商业银行应当经常对个人信用数据库的查询情况进行检查，确保所有查询符合本办法的规定，并定期向中国人民银行及征信服务中心报告查询检查结果。

征信服务中心应当定期核查商业银行对个人信用数据库的查询情况。

第六章　罚则

第三十八条　商业银行未按照本办法规定建立相应管理制度及操作规程的，由中国人民银行责令改正，逾期不改正的，给予警告，并处以三万元罚款。

第三十九条　商业银行有下列情形之一的，由中国人民银行责令改正，并处一万元以上三万元以下罚款；涉嫌犯罪的，依法移交司法机关处理：

（一）违反本办法规定，未准确、完整、及时报送个人信用信息的；

（二）违反本办法第七条规定的；

（三）越权查询个人信用数据库的；

（四）将查询结果用于本办法规定之外的其他目的的；

（五）违反异议处理规定的；

（六）违反本办法安全管理要求的。

第四十条　商业银行有本办法第三十八条至第三十九条规定情形的，中国人民银行可以建议商业银行对直接负责的董事、高级管理人员和其他直接责任人员给予纪律处分；涉嫌犯罪的，依法移交司法机关处理。

第四十一条　征信服务中心工作人员有下列情形之一的，由中国人民银行依法给予行政处分；涉嫌犯罪的，依法移交司法机关处理：

（一）违反本办法规定，篡改、毁损、泄露或非法使用个人信用信息的；

（二）与自然人、法人、其它组织恶意串通，提供虚假信用报告的。

第四十二条　中国人民银行其他工作人员有违反本办法规定的行为，造成个人信用信息被泄露的，依法给予行政处分；涉嫌犯罪的，依法移交司法机关处理。

第七章　附则

第四十三条　本办法所称商业银行，是指在中华人民共和国境内设立的商业银行、城市信用合作社、农村信用合作社以及经国务院银行业监督管理机构批准的专门从事信贷业务的其他金融机构。

第四十四条　本办法由中国人民银行负责解释。

第四十五条　本办法自2005年10月1日起施行。

Interim Measures for the Administration of the Basic Data of Individual Credit Information

Promulgation date: 08-18-2005

Effective date: 10-01-2005

Order of the People's Bank of China

（Order No.3 [2005]）

According to the relevant laws and regulations such as the Law of the People's Republic of China on the People's Bank of China, the People's Bank of China has formulated the Interim Measures for the Administration of the Basic Data of Individual Credit Information, which were adopted at the 11th president's executive meeting of the People's Bank of China on June 16, 2005, are hereby promulgated and shall come into force as of October 1, 2005.

President Zhou Xiaochuan

August 18, 2005

Interim Measures for the Administration of the Basic Data of Individual Credit Information

Chapter I General Provisions

Article 1 The present measures are formulated according to the relevant laws and regulations such as the Law of the People's Republic of China on the People's Bank of China in order to safeguard the financial stability, prevent and lower the credit risk of commercial banks, promote the development of individual credit business and safeguard the security of individual credit information as well as the legal use thereof.

Article 2 The People's Bank of China shall take charge of organizing commercial banks to establish the basic data of individual credit information （hereinafter referred to as the individual information data）, and shall take charge of establishing the service center of credit investigation as well as the daily operation and management of the individual information data.

Article 3 The individual information data shall collect, straighten out and record individual credit information, provide the service of credit reports inquiry for commercial banks and individuals and provide the relevant information services for the formulation of monetary policies, financial supervision and administration as well as any other purpose as prescribed by any law or regulation.

Article 4 The term "individual credit information" as mentioned in the present Measures covers basic individual information, individual information on loans and transactions and any other information that may reflect the individual credit situation.The term "basic individual information" as mentioned in the preceding paragraph refers to such information as the identity information of a natural person, career and habitation address. The term "individual information on loans and transactions" refers to the transactional records as provided by commercial banks, which are formed in the credit activities of natural persons such as loans, credit cards, semi credit cards and guaranty. The term "any other information that may reflect the individual credit situation" refers to the relevant information that reflects the individual credit information, apart from the information on loans and transactions.

Article 5 The People's Bank of China, commercial banks and the work staff thereof shall keep confidential the individual credit information as known in the relevant work.

Chapter II Report and Straightening-out

Article 6 The commercial banks shall observe the standards of the individual credit data as well as the relevant requirements thereof as announced by the People's Bank of China and report the individual credit information to the individual credit data in an accurate, complete and timely manner.

Article 7 The commercial banks shall not provide any individual credit information to any individual credit data that fails to be established upon the approval of the administrative department of credit investigation or is established in any disguised form.

Article 8 The service center of credit investigation shall establish perfect rules and regulations and adopt advanced technical means to ensure the security of individual credit information.

Article 9 The service center of credit investigation shall, according to the requirements of credit report, carry out objective straightening-out and storage for the individual credit information as reported by commercial banks and shall not unlawfully alter any original data.

Article 10 The service center of credit investigation shall, where having any doubt about the information as reported by a commercial bank, send a review notice to the relevant commercial bank according to the relevant procedures as prescribed in a timely manner.

The relevant commercial bank shall give a reply within 5 workdays as of the day when it receives the review notice.

Article 11 Where a commercial bank finds that the individual credit information it has reported is inaccurate, it shall report it to the service center of credit investigation in a timely manner. The service center of credit investigation shall immediately make correction upon receiving the error-correcting report.

Chapter III Inquiry

Article 12 Where a commercial bank handles the following business operations, it may inquire about the relevant individual credit report in the individual credit data:

（1） Examining an application for individual loan;

（2） Examining an application for individual credit card or semi-credit card;

（3） Examining an individual to be a guarantor;

（4） Carrying out post-loan risk management for any individual loan as granted; or

（5） Accepting the application of a legal person or any other organization for a loan or being a guarantor, which requires the inquiry of the credit information of the legal-person and capital contributor.

Article 13 Apart from the provisions of item （4） of Article 12 of the present Measures, a commercial bank shall obtain a written authorization from the inquired person before carrying out any inquiry about the individual credit report. The written authorization may be required by means of adding the relevant article to an application for a loan, credit card, semi-credit card or guaranty.

Article 14 A commercial bank shall establish an internal authorization system of inquiring about the individual credit report for post-loan risk management and the procedures for the inquiry management.

Article 15 The service center of credit investigation may, according to an individual's application, provide the paid individual credit report of the applicant.

The service center of credit investigation shall formulate the corresponding handling procedures and verify the identity of the relevant applicant.

Chapter IV Treatment of Demurrals

Article 16 Where an individual believes that there is any mistake of credit information in his credit report （hereinafter referred to as the information with demurral）, he may file a written application of demurral directly with the service center of credit investigation or through the administrative department of credit investigation of the People's Bank of China where it is located.

The administrative department of credit investigation of the People's Bank of China shall, within 2 workdays as of receiving an application of demurral, forward the demurral to the service center of credit investigation.

Article 17 The service center of credit investigation shall carry out an internal verification within 2 workdays as of receiving an application of demurral.

Where the service center of credit investigation finds that the information with demurral is caused in the procedures for handling the information of the individual credit data, it shall immediately make correction and examine the existing problem in the handling procedures or operating procedures of the individual credit data.

Article 18 Where the service center does not find any problem in the handling procedures of the individual credit data in the internal verification, it shall immediately inform the commercial bank that has provided the relevant information to make verification in written form.

Article 19 A commercial bank shall, within 10 workdays as of receiving a verification notice, make a written reply on the verification to the service center of credit investigation. Where there does exist any mistake of information with demurral, a commercial bank shall take the following measures:

（1） Reporting the corrected information to the service center of credit investigation;

（2） Examining the procedures for reporting the individual credit investigation; and

（3） Carrying out an examination on the other succeeding individual credit information and in the case of any mistake, making a new report.

Article 20 The service center of credit investigation shall, within 2 workdays as of receiving the corrected information as newly reported by a commercial bank, correct the information with demurral.

For any information with demurral that has any virtual mistake but can not be corrected due to any technical reason for the time being, the service center of credit investigation shall make a special mark for the said information with demurral so that it may be distinguished from any other information with demurral.

Article 21 Upon verification, where the existing mistake of information with demurral cannot be confirmed, the service center of credit investigation shall not alter the relevant individual credit information according to the requirements of the applicant who has filed the demurral.

Article 22 The service center of credit investigation shall, within 15 workdays as of receiving an application of demurral, provide a written reply to the applicant who has filed the demurral or the administrative department of credit investigation of the People's Bank of China that has forwarded the application of demurral. Where the information with demurral is corrected, the service center of credit investigation shall, at the same time, provide the corrected credit report.

For the information with demurral that has a virtual mistake but cannot be corrected due to any technical reason for the time being, the service center of credit investigation shall give an explanation in its written reply and shall, upon the correction of the information with demurral, provide the corrected credit report.

Article 23 The administrative department of credit investigation of the People's Bank of China that has forwarded the application of demurral shall, within 2 workdays as of receiving the written reply and the corrected credit report from the service center of credit investigation, forward it to the relevant applicant who has filed the demurral.

Article 24 For any information with demurral that cannot be verified, the service center of credit investigation shall allow the applicant who has filed the demurral to annotate a personal statement on the information with demurral within 100 words. The personal statement shall not include any content that is irrelevant to the information with demurral and the applicant who has filed the demurral shall be responsible for the authenticity thereof.

The service center of credit investigation shall keep the original archive of the personal statement in a proper manner and shall incorporate the personal statement into the credit report of the person who files the demurral.

Article 25 The service center of credit investigation shall mark the information that is in the demurral treatment process.

Chapter V Security Management

Article 26 A commercial bank shall, according to the relevant provisions of the People's Bank of China, formulate the internal management system and operating procedures in such aspects as report, inquiry, use, demurral treatment and security management of credit information and shall report them to the People's Bank of China for archival filing.

Article 27 A commercial bank shall establish a user management system, clarifying the functions and duties of administrator users, data report users and information inquiry users as well as the operating procedures.

No one may concurrently hold the posts of an administrator user, data report user or inquiry user.

Article 28 An administrator user of a commercial bank shall, according to the operating procedures, establish the corresponding users for the relevant authorized person. An administrator user shall not make any direct inquiry on individual credit information.

An administrator user shall intensify the daily administration of the inquiry users and data report users at the same level as well as the administrator users at a lower level. Where any work staff of an inquiry user is transferred, the user account shall be terminated immediately.

Article 29 The administrator users, data report users and information inquiry users of commercial banks shall be reported to the administrative department of credit investigation of the People's Bank of China and the service center of credit investigation for archival filing.

In the case of any alteration of the user work staff as prescribed in the preceding paragraph, a commercial bank shall report it to the administrative department of credit investigation of the People's Bank of China and the service center of credit investigation for archival filing within 2 workdays.

Article 30 A commercial bank shall establish a password controlling system for administrator users and inquiry users and shall carry out an examination on the implementation of the password control on a periodic base.

Article 31 A commercial bank shall establish a management system of guaranteeing the security of individual credit information so as to ensure that only internal authorized personnel may contact the individual credit report, and shall not use the individual credit report for any other purpose beyond those as prescribed by Article 12 of the present Measures.

Article 32 The service center of credit investigation shall formulate the management system and operating procedures in such aspects as the collection, straightening-out, storage, inquiry, demurral treatment, users' management and security management to clarify the functions and duties of all posts, improve the internal control system and guarantee the normal operation of the individual credit data and the security of individual credit information.

Article 33 The service center of credit investigation and the personnel thereof shall not violate the provisions of any law or regulation or the present Measures by altering, damaging, divulging or unlawfully using any individual credit information and shall not viciously collude with any natural person, legal person or any other organization to provide any false credit report.

Article 34 The service center of credit investigation shall establish a supervisory and controlling system regarding the internal operation and external visit of the individual credit data to supervise the operations as conducted by users of the individual credit data as well as commercial banks and prevent any illegal invasion into the individual credit data.

Article 35 The service center of credit investigation shall establish a spare system for disasters and take necessary measures for security and guaranty so as to prevent any loss of data.

Article 36 The service center of credit investigation shall record all the inquiries as conducted by commercial banks and shall feed them back to commercial banks in a timely manner.

Article 37 A commercial bank shall carry out examination on the inquiries of the individual credit data in a frequent manner so as to ensure that all inquiries comply with the provisions of the present Measures and shall report the results of the examination on inquiries to the People's Bank of China and the service center of credit investigation on a periodic base.

The service center of credit investigation shall verify the inquiries of the individual credit data as made by commercial banks on a periodic base.

Chapter VI Penalties Provisions

Article 38 Where a commercial bank fails to establish the relevant management system and operational procedures according to the present Measures, the People's Bank of China shall order it to correct. Where a commercial bank fails to correct within the time limit, it shall be given a warning and fined 30, 000 yuan.

Article 39 A commercial bank that has any of the following circumstances shall be ordered to correct and be fined 10, 000 yuan up to 30, 000 yuan. Where any crime is involved, it shall be transferred to the judicial organ according to law:

（1） Violating the present Measures by failing to report the individual credit information in an accurate, complete and timely manner;

（2） Violating the provisions of Article 7 of the present Measures;

（3） Overstepping its power to inquire about the individual credit data;

（4） Misusing the inquiry result for any other purpose other than those as prescribed by the present Measures;

（5） Violating the provisions on demurral treatment; or

（6） Violating the requirements of security management of the present Measures.

Article 40 Where a commercial bank has the circumstances as prescribed by Articles 38 and 39, the People's Bank of China may suggest that the relevant commercial bank gives a disciplinary punishment to the director of board, senior management personnel and any other person as held directly liable. Where any crime is involved, it shall be transferred to the judicial organ.

Article 41 Where a work staff of the service center has any of the following circumstances, he shall be given an administrative punishment. Where any crime is involved, he shall be transferred to the judicial organ for punishment according to law:

（1） Violating the provisions of the present Measures by altering, damaging, divulging or unlawfully using the individual credit information; or

（2） Viciously colluding with any natural person, legal person or any other organization to provide false credit report.

Article 42 Where any other work staff of the People's Bank of China has any act in violation of the present Measures, which causes any divulgence of individual credit information, he shall be given an administrative punishment. Where any crime is involved, he shall be transferred to the judicial organ for punishment according to law.

Chapter VII. Supplementary Provisions

Article 43 The term "commercial banks" as mentioned in the present Measures refers to the commercial banks, urban credit cooperatives, rural credit cooperatives and any other financial institutions that specially engage in the credit business as approved by the banking regulatory institution of the State Council.

Article 44 The power to interpret the present Measures shall remain with the People's Bank of China.

Article 45 The present Measures shall come into force as of October 1, 2005