9. (1) Where the Bank receives an application from a credit information provider or credit information subject to amend information held on the Register on the ground that it is inaccurate, incomplete or not up to date, the Bank—

(a) shall take all such steps, including giving notice requiring the provision of information from any credit information provider or credit information subject, as are reasonable to enable the Bank to decide whether to amend the information, and

(b) where it decides that the information should be amended, shall do so.

(2) An application under subsection (1) shall be in writing and accompanied by information supporting the application.

(3) Where the Bank requires a credit information provider or credit information subject to provide information under subsection (1)(a), the requirement shall be complied with within 15 days of the date on which the notice is received.

(4) If an application under subsection (1) is made by a credit information subject, the Bank shall, unless the application has already been decided or withdrawn, notify the credit information subject that the Bank will, no later than 20 days after the date on which the application is received, give notice to the credit information subject either—

(a) of the decision that has been made on the application, or

(b) that the Bank requires until such date as is specified in the notice, not being more than 40 days after the date on which the application is received, to make a decision on the application.

(5) If an application under subsection (1) is made by a credit information subject, the Bank shall, unless the application has already been decided or withdrawn, make a decision on the application no later than 20 days after the date on which the application is received or, if the Bank gives notice under subsection (4)(b), no later than the date specified in the notice.

(6) If the Bank gives notice to a credit information subject under subsection (4)(b), the notice shall state the reasons why it has not yet been possible to make a decision.

(7) Where an application to access information held on the Register which relates to a credit information subject is made at a time when an application to amend the information has been made but not decided, the Bank shall either—

(a) refuse to give access to the information until the application to amend the information has been decided, or

(b) indicate to the person making the application to access the information that an application to amend the information has been made but not decided.