PolicyBrief
S. 1467
119th CongressApr 10th 2025
Homebuyers Privacy Protection Act
IN COMMITTEE

The Homebuyers Privacy Protection Act amends the Fair Credit Reporting Act to limit consumer reporting agencies from providing consumer reports for mortgage loan credit transactions without consumer authorization, a firm offer of credit, or a current relationship with the lender, servicer, or financial institution.

John "Jack" Reed
D

John "Jack" Reed

Senator

RI

LEGISLATION

Bill Seeks to Shield Homebuyers' Credit Info from Unsolicited Mortgage Offers

This bill, the Homebuyers Privacy Protection Act, aims to change the rules for when your credit report can be shared after you apply for a home loan. It specifically amends the Fair Credit Reporting Act (FCRA) to limit consumer reporting agencies (think Equifax, Experian, TransUnion) from handing out your credit report to other companies just because you submitted a mortgage application. These changes are set to kick in 180 days after the bill becomes law.

Cutting Down the Post-Application Noise

If you've ever applied for a mortgage, you might know the drill: suddenly your mailbox and phone are overflowing with offers from other lenders and insurers you've never contacted. This bill targets that scenario. Under its provisions (amending FCRA Section 604(c)), a credit reporting agency generally cannot provide your report to another entity for a mortgage-related transaction if the request stems from you applying for a loan elsewhere. The goal is to give homebuyers more control over who sees their sensitive financial data during the already stressful home-buying process.

The Fine Print: Who Still Gets Access?

Now, this isn't a total lockdown on your credit report. The bill lays out specific exceptions where sharing is still allowed. Another company can get your report based on your mortgage application if:

  1. They make a "firm offer of credit or insurance": This is an existing FCRA concept, generally meaning a pre-approved offer based on your creditworthiness, not just random advertising.
  2. You give explicit permission: If you specifically authorize a company to access your report, they can.
  3. They have an existing relationship with you: This includes:
    • The institution currently originating your mortgage.
    • The company currently servicing your mortgage (your "servicer," as defined in the Real Estate Settlement Procedures Act, or RESPA).
    • An insured bank or credit union (as defined under the Federal Deposit Insurance Act and Federal Credit Union Act) where you already have an account.

Essentially, the bill tries to stop unrelated third parties from accessing your report solely based on your mortgage application trigger, while still allowing access for legitimate offers, your explicit consent, and entities you already do business with.

What This Means on the Ground

The practical effect for homebuyers could be a noticeable reduction in unsolicited calls and mail after applying for a mortgage, leading to a less cluttered and potentially less confusing process. It enhances privacy by putting tighter controls on a specific trigger for credit report sharing. For companies that relied on buying these triggered credit reports for marketing leads, this could require a shift in strategy. The definitions for key terms like "residential mortgage loan" and "servicer" rely on existing laws like the S.A.F.E. Mortgage Licensing Act and RESPA, integrating this change into the current regulatory landscape. Remember, these changes would take effect 180 days after the Act is signed into law.