Homebuyers Privacy Protection Act

What it does

This act limits the circumstances in which credit reporting agencies may provide consumer credit reports to third parties in connection with residential mortgage transactions.

Specifically, the act prohibits a credit reporting agency from providing a consumer's credit report to a third party in connection with a residential mortgage transaction unless the transaction consists of a firm offer of credit or insurance and (1) the third party provides documentation certifying that it has the consumer's consent; or (2) the third party has originated a mortgage on behalf of the consumer, is a current mortgage loan servicer to the consumer, or has a current specified banking relationship with the consumer.

These provisions take effect 180 days after enactment.

The Government Accountability Office must study and report on the value of trigger leads (a marketing tactic facilitated by credit reporting agencies that may result in unsolicited credit offers to a consumer after a consumer applies for a separate type of credit) received by text message.

Summary by the Congressional Research Service, Sep 5, 2025 (Public Law). CRS summarizes bills impartially; it does not take positions.