Cybersecurity Policy Report, Law Restricting Sales of Homebuyer Financial Data Signed into Law, (Sep 8, 2025)

By Tony Foley

The White House announced last Friday that President Trump has signed legislation designed to prevent the widespread sharing of mortgage applicants’ personal data.

The Homebuyers Privacy Protection Act (H.R. 2808, 119th Cong, (2025)), amends the Fair Credit Reporting Act by restricting credit reporting agencies from selling information about potential homebuyers to third parties, a practice known as “trigger leads.” The bill was passed with bipartisan support in the House in June, and the Senate accepted the House version in August (CPR, Aug. 9).

The law will take effect March 4, 2026, 180 days after its enactment. In addition, the law requires the Comptroller General of the United States to conduct a study on the value of trigger leads received by text message, including input from state regulatory agencies, and to submit a report to Congress within 12 months of the data of the law’s enactment.

News: FederalLegislation DataPrivacy