Homebuyers Privacy Protection Act- March 2026
When credit bureaus sell consumer information after a mortgage inquiry, it is known as “trigger leads.” This practice has historically been legal, but a new law, the Homebuyers Privacy Protection Act, was signed in September 2025 to largely prohibit it, effective March 5, 2026.
Understanding Trigger Leads
When you apply for a mortgage, the lender pulls your credit report, which creates a “hard inquiry” on your file. The three major credit bureaus (Equifax, Experian, and TransUnion) then flag this activity and sell your information (as a “trigger lead”) to other lenders who subscribe to these services. These other lenders then contact you with unsolicited offers in an attempt to win your business, often within 24 hours of your initial application.
While this practice was legal under the Fair Credit Reporting Act (FCRA), it has been a major source of consumer frustration due to the flood of unwanted calls, texts, and emails, and the risk of exposure to scams. Many consumers mistakenly believe their original lender is selling their data, which is generally not the case.
New Legislation
The Homebuyers Privacy Protection Act (H.R. 2808) makes it illegal for credit bureaus to sell mortgage trigger leads without the consumer’s explicit consent. The law includes limited exceptions, such as allowing contact from your current mortgage servicer or bank with whom you have an existing relationship.
How to Stop Unwanted Solicitations (Until the Law Takes Effect)
Until the new law is fully in effect, you can take proactive steps to reduce unwanted calls and mail:
- Opt Out of Prescreened Offers: Visit OptOutPrescreen.com or call 1-888-5-OPT-OUT (1-888-567-8688) to opt out of prescreened offers for credit and insurance for five years or permanently. The online request is processed within five business days.
