Homebuyers Privacy Protection Act

This 2025 law limits 'trigger leads', which are credit reports sold to other lenders when a consumer applies for a mortgage. From March 4, 2026, an agency may pass on such a report only for a firm offer of credit or insurance to a party that has the consumer's documented consent or already originates, services, or holds an account relationship with the consumer.