Homebuyers Privacy Protection Act Signed Into Law, Restricting Trigger Leads

On September 5, the Homebuyers Privacy Protection Act (H.R. 2808) was signed into law. The law amends the Fair Credit Reporting Act to restrict the sale of consumer information generated when borrowers apply for residential mortgage loans.

Under the new framework (previously discussed here), consumer reporting agencies may release a mortgage-related trigger lead only if the recipient makes a firm offer of credit or insurance and qualifies under narrow criteria. Eligible recipients include those with documented consumer authorization, current holders or servicers of the consumer's mortgage, and depository institutions or credit unions with existing account relationships. The statute takes effect 180 days after enactment and also requires the Comptroller General to study the consumer impact of trigger-lead solicitations delivered by text message, with findings due to Congress within one year.