What a credit bureau holds, and how each kind of data shapes a lending decision
A one-minute summary read by an AI voice.
Credit bureaus · Part 1
Key points
- Bureau files are built from identity data and credit data: accounts, balances, limits, repayment conduct and, in some systems, enquiries by other creditors (World Bank, 2011)
- Negative-only files record adverse events; positive data also record on-time payment, which the World Bank links to fewer loans to poor risks and more credit for thin-file borrowers
- Published texts in the Philippines, Indonesia, Malaysia and Singapore describe the same building blocks but differ in extra elements and in who reports
Implications for lenders
Lenders can tie each credit rule to a data type: identity to matching and fraud checks, balances and limits to affordability and limit sizing, repayment conduct to approval and pricing, and enquiries to checks on multiple recent applications. Where only adverse data or partial reporting is available, a clean bureau result may support a smaller starting limit that grows with observed repayment rather than a full limit at once. Non-bank lenders may also need to establish whether their borrowers' other debts, such as microfinance or online loans, are reported to the bureau they query.
Implications
Facts
Building blocks: the World Bank's General Principles for Credit Reporting (September 2011), prepared by a World Bank-coordinated task force with support from the Bank for International Settlements, says credit information results from two broad categories of data: identity data, collected to identify the borrower correctly, and credit data, which describe the borrower's indebtedness, such as the amount, type and maturity of a loan, guarantees, collateral value and payment arrears. It also lists credit enquiries from other creditors and credit scores among the information that may be held.
Negative and positive data: the same report describes negative data as event-based, registered only when an adverse event such as a missed payment, default, bankruptcy or court judgment occurs, so borrowers who always pay on time have only a partial credit history in the eyes of third parties. Positive reporting adds items such as account balances, credit limits and on-time payments; the report associates its use with fewer loans to poor-risk borrowers and more credit for people with little borrowing history, and notes that with positive data a borrower's recovery after an adverse event can be reflected over time.
Philippines: the Credit Information System Act (Republic Act No. 9510, approved 31 October 2008) defines basic credit data as positive and negative credit information, with positive information concerning a borrower's credit performance and negative information concerning poor credit performance; submitting entities are entities that provide credit facilities.
Indonesia: OJK's regulation on reporting and requesting debtor information through SLIK (POJK 18/POJK.03/2017, as issued in 2017) lists debtor information as the debtor's identity, owners and management of corporate debtors, funding facilities received, collateral, guarantors, the quality of the facilities and other information. As issued, it made reporting mandatory for commercial banks, rural banks, finance companies and other financial institutions that provide funds, other than microfinance institutions; peer-to-peer lending platforms and microfinance institutions could report with OJK approval.
Malaysia: Bank Negara Malaysia's CCRIS FAQ says participating financial institutions report borrowers' identification data and data on credit applications and outstanding loans, such as the type of facility, conduct of account, instalment amount and credit limit; the report shows active accounts and recent pending and approved applications. Participating institutions include banks, development financial institutions, certain insurers, payment instrument issuers, building societies, credit leasing companies and government agencies.
Singapore: the government's MoneySense guide (updated 28 September 2026) describes a credit report as a compilation of credit payment history collected across banks and major financial institutions, covering account delinquency, enquiry activity and bankruptcy information from public sources; self-enquiries do not affect the score, while more loan applications signal higher credit risk. Credit Bureau (Singapore) is licensed and regulated by the Monetary Authority of Singapore under the Credit Bureau Act 2016.
Analysis
Each kind of data enters a different part of the decision. Identity data are the gate: they decide whether a lender finds the right file at all, and a wrong or missed match undermines every later step. Account and balance data feed affordability and limit setting, because they show existing obligations and unused limits. Repayment conduct drives approval and pricing; with negative-only data a lender mainly learns whom to decline, while positive data also let it tell a long record of on-time payment apart from no record at all. Enquiry and application data, such as the pending and approved applications CCRIS shows, signal how actively a borrower is seeking credit, which matters most for fast-cycle products such as BNPL, small digital loans and earned wage access, where several applications can be made within days.
The published texts converge on identity, facilities and conduct but add different elements. Indonesia's SLIK rule names collateral, guarantors and the owners and management of corporate debtors, which are most useful in vehicle and SME lending. Malaysia's CCRIS description puts applications next to outstanding loans, giving a view of credit that is not yet booked. Singapore's description adds bankruptcy records from public sources, and the Philippine law frames the whole system in positive and negative terms.
In T&S's view, what a lender can see depends as much on who reports as on which fields exist. Where some lenders report only voluntarily, as microfinance institutions and peer-to-peer platforms did under Indonesia's rule as issued in 2017, a clean result may simply mean that a borrower's main debts sit outside the system. Later parts of this series compare which bureaus in the region hold negative-only or positive data, and set out by country who must report and who may enquire.
Counterpoints and uncertainties
Bureau data describe past behaviour inside the reporting perimeter only. Debts with lenders that do not report, such as institutions outside mandatory reporting, do not appear, so a clean file can understate a borrower's obligations. Positive data improve the separation of good and bad risks only once enough history has built up, and published descriptions of what a bureau holds do not show how complete or timely the data are; data quality and dispute processes are a later theme of this series. The descriptions here follow the cited texts as published; later amendments or new reporting duties can widen or narrow what lenders see.
This article is based solely on publicly available sources.
Sources
- World Bank: General Principles for Credit Reporting (September 2011)primary
- Republic of the Philippines: Republic Act No. 9510, Credit Information System Act (2008), Senate Legislative Digital Resourcesprimary
- OJK: POJK 18/POJK.03/2017 on Reporting and Requesting Debtor Information through SLIK (BPK legal database)primary
- Bank Negara Malaysia: FAQs, CCRIS informationprimary
- MoneySense (Government of Singapore): Credit Reports and Creditworthiness (updated 2026-09-28)primary
SEA Lending Brief
A weekly summary of lending, credit and regulation across Southeast Asia.
Reports are for information only and are not investment advice.
A Japanese version of this article is available: 日本語版
More on Southeast Asia (regional)
Southeast Asia (regional) overview: key indicators and all articles →