Pres. Trump signed H.R. 2808, the Homebuyers Privacy Protection Act.

September 5, 2025 , The law amends the FCRA ((Sec. 604(c), 15 U.S.C. 1681b(c)) to prevent consumer reporting agencies from furnishing consumer reports in most circumstances. This Act will take effect 180 days after the date of enactment. The law also requires a GAO study.

 

The Homebuyers Privacy Protection Act (H.R. 2808), effectively ending the practice of selling mortgage “trigger leads.” This bipartisan legislation, authored by Representatives John Rose and Ritchie Torres, protects homebuyers’ personal financial information.

Trigger leads are created when a person applies for a mortgage, causing their personal data to be sold to other lenders, often without their knowledge or consent. The new law limits how and when this data can be shared, which industry leaders say is a major win for both borrowers and mortgage professionals.