HR-2808-119
Became Public Law No: 119-36.
Sponsored by John Rose (R-TN)
What it does
This law restricts when credit reporting agencies may share a consumer's credit report with third parties during a residential mortgage transaction. A credit reporting agency may only share a report if the transaction involves a firm offer of credit or insurance, AND either the consumer has given documented consent, or the third party is the consumer's mortgage originator, current loan servicer, or has an existing specified banking relationship with the consumer. These rules take effect 180 days after enactment.
Who benefits
Homebuyers and mortgage applicants whose credit data is currently shared broadly without their knowledge. Consumers who receive unwanted solicitation calls and offers after applying for a mortgage (a practice known as "trigger leads"). Privacy-focused consumers broadly. Existing mortgage lenders and servicers who already have a relationship with the consumer and retain access rights under the law.
Who is hurt
Third-party mortgage lenders and brokers who currently use trigger leads to solicit competing offers to consumers mid-transaction. Lead generation companies and data brokers that sell mortgage trigger lead lists. Some consumers who might have benefited from receiving competing mortgage offers they were unaware of. Credit reporting agencies, which may see reduced revenue from trigger lead sales. Real estate and mortgage marketing firms that rely on credit-inquiry data to identify prospective customers.
Supporters argue
Supporters argue that the current trigger lead system exposes homebuyers — at a financially vulnerable and stressful moment — to a flood of unsolicited calls and offers from lenders they never contacted, often causing confusion about who actually holds their application. They contend that consumers did not consent to having their credit inquiry data sold, and that the law restores a basic expectation of privacy by requiring either documented consent or a pre-existing financial relationship before a credit report can be shared.
Opponents argue
Opponents argue that trigger leads, while disruptive, serve a pro-competitive function by alerting consumers to potentially better mortgage rates and terms they might otherwise never discover — particularly benefiting first-time or lower-income buyers who may not shop widely on their own. They contend that restricting this data flow reduces market competition among lenders, may entrench the originating lender's advantage, and could result in consumers paying higher rates or fees by limiting their exposure to competing offers.
Constitutional context
This law operates under Congress's Commerce Clause authority (Art. I, §8, cl. 3) to regulate interstate credit markets, which is well-established through the Fair Credit Reporting Act framework. No significant constitutional tension is present; the law modifies an existing statutory scheme rather than creating sweeping new agency authority, and post-Loper Bright concerns are limited because the restrictions are set directly by Congress rather than delegated to an agency.
Checks and balances
Congress directly sets the restrictions through statute; the Consumer Financial Protection Bureau and Federal Trade Commission retain existing enforcement authority over credit reporting agencies; affected parties may challenge specific applications under the Due Process Clause of the Fifth Amendment.
Historical precedent
The Fair Credit Reporting Act (1970) and its 2003 amendments under FACTA established the existing framework for permissible uses of consumer credit reports, including the "firm offer of credit" exception that this law now further conditions.