Book a Discovery Call
Back to Notes
Notes

The trigger lead ban: what H.R. 2808 stopped in 2026

What the Homebuyers Privacy Protection Act stopped, who is still allowed to call, and what changed for a branch on 4 March 2026.

VisionXLab 5 min read

For decades, pulling a borrower's credit for a mortgage put that borrower on a list. The inquiry was recorded at the bureau, the bureau could sell the fact of it under the prescreening rules of the Fair Credit Reporting Act, and competing lenders called within hours. The borrower had asked nobody for those calls, and often could not tell which of them came from the lender they had actually applied to.

That is a trigger lead, and as of March 2026 it is largely over.

What the law is

H.R. 2808, the Homebuyers Privacy Protection Act, Public Law 119-36. Approved 5 September 2025. It passed the House on 23 June 2025 and the Senate on 2 August 2025, with a companion bill in the Senate as S. 1467. It amends section 604(c) of the Fair Credit Reporting Act, at 15 U.S.C. 1681b(c), by adding a new paragraph on prescreening report requests.

Source: Public Law 119-36, 119th Congress, enrolled text (139 Stat. 493). govinfo.gov · Passage dates and the S. 1467 companion are on the bill page for H.R. 2808 at congress.gov

What it actually says

The operative rule is narrow and worth reading in its own shape. Where a person requests a consumer report in connection with a credit transaction involving a residential mortgage loan, the bureau may not, based on that request, furnish a report to anybody else unless both of these hold:

  • the transaction consists of a firm offer of credit or insurance, and
  • that other person either has filed documentation with the bureau certifying that it has the consumer's authorization, or originated the consumer's current residential mortgage loan, or is the servicer of that loan, or is an insured depository institution or credit union that holds a current account for that consumer.

In plain terms: an existing relationship, or documented permission, or nothing.

The date, and why two dates are in circulation

Section 3 sets the effective date as "the date that is 180 days after the date of enactment of this Act". Enactment was 5 September 2025. Counting 180 days from there lands on 4 March 2026. A large share of trade coverage prints 5 March 2026 instead. We follow the statute and note the discrepancy rather than quietly picking one, because this is exactly the kind of detail that gets copied from a blog post into a compliance memo.

Source: Public Law 119-36, Section 3, effective date. Enactment date 5 September 2025, per the enrolled text, which closes "Approved September 5, 2025". govinfo.gov

There is also a Section 4 nobody talks about: the Comptroller General was directed to study the value of trigger leads received by text message, with input from state regulators, lenders, depository institutions, bureaus and consumers, and to report to Congress within twelve months of enactment. That report is due in the second half of 2026 and is worth watching, because it is the only official measurement of this practice anyone has commissioned.

What changes for a branch

The interception call is gone for strangers. The party that used to phone your applicant an hour after you pulled credit, with a rate that was never going to hold, cannot buy that list any more unless it already holds a relationship with that borrower. Your pipeline leaks less, and it leaks less without you doing anything.

The exemptions are asymmetric, and that matters strategically. Servicers, the originator of the current loan, and depository institutions holding the consumer's account are all still permitted recipients. If you originate and service, or you sit inside a bank or a credit union, your retention lane is intact. If your growth was coming from calling other lenders' applicants, that lane closed on the effective date and it is not coming back.

Sourcing moves back to first-party channels. Your own database, referral partners, and advertising where the consumer asks to be contacted. Every one of those is slower to stand up than buying a list, which is precisely why the desks that already had them are the ones that felt nothing in March.

Check what your marketing budget bought instead. If any line item was funded by trigger data, something else is now being delivered against it. Ask where those names came from and what the consumer agreed to, because the law changed what a bureau may furnish and changed nothing at all about consent obligations on the call itself.

What it does not do

It does not stop competitors advertising to the same consumer, it does not stop a borrower shopping four lenders in an afternoon, and it does not restrict a servicer or an account-holding institution marketing to its own customer. It closes one channel: the sale of a prescreened list built from a mortgage credit inquiry, to a party with no relationship to that consumer.

The wider read

A supply of in-market borrowers that any lender could buy, without the borrower's involvement, stopped existing. Demand for those borrowers did not. The desks that were buying trigger data are now competing for the same consumers in channels where the consumer has to agree to be contacted first, which is a slower and more expensive market than the one they left.

If you are sizing a lead budget in that market, the numbers you will be quoted deserve the treatment we gave them in what the data supports between a lead and a funded loan, and the follow-up assumption underneath every one of those quotes is examined in how many calls it takes to reach a mortgage lead. Buying questions are answered on our FAQ.

Questions this page answers

When a lender pulls a borrower’s credit for a mortgage, the credit bureau records the inquiry and, under the prescreening rules of the Fair Credit Reporting Act, could sell that borrower’s details on as a list of people known to be shopping for a mortgage right now. Competing lenders bought those lists and called within hours. The borrower never asked to be contacted and frequently could not tell which call came from the lender they had actually applied to.

Section 3 of the Homebuyers Privacy Protection Act says the Act takes effect on the date that is 180 days after the date of enactment. It was approved on 5 September 2025, which counts out to 4 March 2026. A good deal of trade coverage prints 5 March 2026 instead. Either way the change is live now, and the statute itself sets the rule rather than the coverage.

The amended section 604(c) of the Fair Credit Reporting Act allows a report off that inquiry only where the transaction is a firm offer of credit or insurance and the recipient either has filed documentation with the bureau certifying it has the consumer’s authorization, or originated the consumer’s current residential mortgage loan, or services that loan, or is an insured depository institution or credit union that holds a current account for that consumer.

No. It closes one specific channel, the sale of prescreened lists built from a mortgage credit inquiry, to parties with no existing relationship with that consumer. It does not restrict advertising, it does not stop a borrower shopping several lenders, and it does not touch a servicer or an account-holding institution marketing to its own customer.

No. The Act governs what a consumer reporting agency may furnish off a mortgage inquiry. It does not change TCPA consent, it does not change what a consumer agrees to on a form, and it does not alter the obligations that already applied to anyone calling a consumer who asked to be called.

Buying questions rather than research ones are answered on the FAQ, and anything that is not there gets asked on a call.

Book a Discovery Call

More in Resources