On September 5, 2025, President Trump signed into law the Homebuyers Privacy Protection Act, a landmark step in protecting consumers during the mortgage process.
What’s changing?
For years, mortgage applicants were vulnerable to “trigger leads.” This practice allowed credit bureaus to sell consumer data—such as the fact that someone applied for a mortgage—to other lenders. The result? Borrowers often faced an overwhelming wave of unsolicited calls, texts, and emails right after applying.
The new law puts an end to most of these practices.
Key provisions:
Amends the Fair Credit Reporting Act to ban most trigger leads.
Credit bureaus can no longer sell applicant data, unless:
- The consumer explicitly opts in to receive offers.
- The lender already has a pre-existing relationship (bank, credit union, or current servicer).
- The communication qualifies as a firm offer of credit.
Timeline:
The law takes effect 180 days after signing → meaning March 5, 2026 is when enforcement begins.
Legislative path:
- June 10, 2025 → Unanimous approval (46-0) in the House Financial Services Committee.
- June 23, 2025 → Passed the House by voice vote.
- August 2, 2025 → Passed Senate by unanimous consent.
- September 5, 2025 → Signed into law.
Industry & consumer reaction:
- Broad support: Mortgage Bankers Association, NAMB, ABA, Consumer Federation of America, and more, calling it a “major victory for borrowers.”
- Sen. Jack Reed: The law “puts consumers back in the driver’s seat.”
- Criticism: Consumer Data Industry Association warns it could reduce competition and favor larger lenders.
0 Comments