Article 151 

Any person shall be prohibited from providing credit information services prior to obtaining a license for that purpose from the Bank. The Board shall lay down the conditions and controls that must be fulfilled in companies that wish to provide credit information services. It shall also lay down the mechanisms of supervision and control over the function of these companies.

---

Article 152 

The Bank shall lay down the rules governing the exchange of information and data between the Bank and financial institutions, and amongst them, and that which is related to its clients' indebtedness and credit facilities given to them, to guarantee the preservation of its confidentiality, and ensure the availability of necessary information and data for the sound granting of credit. It shall also lay down the bylaw for procedures to be followed by banks in relation to the protection of the confidentiality and privacy of information and data related to clients and their transactions. Financial institutions must deliver to each of its clients a copy of the same when submitting a request to conduct the transaction.

---

Article 153 

Financial institutions must protect,  record, archive, observe, collect, process and properly categorize credit information in an appropriate and easily referable manner through the development of a plan for the retrieval of credit information in emergencies, and a plan for the continuous application of the same. Financial institutions must also process or use client data and credit information within the scope of its purpose for which it has been allocated, and in a manner that is not contrary to the provisions of this Law and the bylaws and decisions issued in implementation thereof.

---

Article 154 

The Bank may request from the financial institutions subject to its control to provide it with periodic data about its activities or any other credit information about any of its clients. The Bank may carry out an inspection of financial institutions to verify that information.

---

Article 155 

Financial institutions must take all the technical and vocational measures necessary to protect their electronic systems and networks to ensure the protection of credit information from loss or damage, taking into account the technical and technological standards in place, including the adoption of regulations to save backup copies, according to international best practices.

---

Article 156 

Financial institutions should limit the validity of access to credit information about their clients to employees assigned to it by law by virtue of their functions, and prevent those not concerned therewith from access to such data or information or disclosure, modification or use thereof, in any form whatsoever, or tampering therewith.

---

Article 157 

A credit information centre, subordinate to the Governor, shall be established in the Bank, by a resolution issued by the Board, which shall be responsible for the following: 1 - Creation of a central credit database to provide credit information necessary to help make sound credit decisions and the development of proper economic and financial policies. 2 - Contribution to the awareness and deepening of a credit culture, thereby helping to reduce credit risk. 3 - Any other tasks entrusted to it by the Governor. The Centre's membership shall be open to all financial institutions and information providers in the country. The Governor shall lay down the bylaws and regulations for the function of the Centre.

---

Article 158 

The credit information centre shall collect credit and analyze credit information about clients of its participating members and information providers which shall be exchanged with them to help them to make sound credit decisions. Members may obtain through the Centre the credit report on any client according to the procedures and bylaws of the Centre

---

Article 159 

The Centre shall be managed by a chief executive, whose appointment and specification of his terms of reference, shall be by means of a resolution issued by the Governor.