Mortgage Trigger Leads & the HPPA
2 articles
When a borrower applies for a mortgage, the credit bureaus can sell that inquiry as a "trigger lead" to competing lenders within hours. For years that was legal under the FCRA firm-offer-of-credit framework. The Homebuyers Privacy Protection Act (HPPA) — signed into law as Public Law 119-36 — tightens that sharply. This cluster covers what a trigger lead actually is, exactly what the HPPA restricts, who can still be sold one, and how operators on both sides of the transaction should adjust before the rules take effect.
All Articles
Who Can Still Buy a Mortgage Trigger Lead After HPPA? The Two Exceptions
HPPA doesn’t ban every trigger lead — it carves out two exceptions: documented consumer consent, and a qualifying existing relationship. Here’s how each works on the buy side.
Jun 25, 2026
Trigger Leads Are Now Restricted: What the Homebuyers Privacy Protection Act Actually Changed
The Homebuyers Privacy Protection Act became Public Law 119-36 on September 5, 2025, and its restrictions took effect roughly 180 days later. Here’s what it changed about mortgage trigger leads — and what it didn’t.
Jun 18, 2026
Frequently Asked Questions
What is a mortgage trigger lead?
When someone applies for a mortgage, the lender pulls their credit, which creates an inquiry at the credit bureaus. Under the FCRA, the bureaus have been able to sell that inquiry — a "trigger lead" — to other lenders who then pitch the same borrower, often within hours. It is a prescreened firm offer of credit, which is why it was permitted in the first place.
What did the Homebuyers Privacy Protection Act change?
The HPPA (Public Law 119-36) restricts when a credit bureau may furnish a trigger lead in a residential mortgage transaction. Broadly, the third party receiving the lead must either certify that the consumer consented to being contacted, or already have a defined relationship with the consumer — for example, having originated the consumer’s current mortgage, currently servicing it, or holding a current banking relationship. The bare prescreened-offer path that powered the old trigger-lead market is what the law reins in.
When does the HPPA take effect?
The law was enacted on September 5, 2025 and takes effect roughly 180 days later — on or about March 4, 2026. The exact operational details are still settling, so treat the early-2026 window as the date to be ready by, not a finish line to wait for.
Are trigger leads completely banned now?
No. The HPPA narrows who may receive a trigger lead rather than banning the practice outright. Leads can still flow where the consumer has consented to contact or where the receiving party already has the kind of established relationship the statute describes. The practical effect is that buyers relying purely on cold prescreened trigger data need a new plan.
The Operator’s Compliance Brief
What changed in lead-gen compliance, and what to do about it. Free, no spam.
Related Calculators
Key Terms to Know
FCRA
The Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.), the federal law governing how consumer reports may be furnished and used — including the prescreen/firm-offer exception at § 1681b(c).
Firm Offer of Credit
Under FCRA § 603(l), an offer of credit or insurance that will be honored if the consumer meets pre-selected criteria. It supplies the “permissible purpose” that historically made prescreened trigger-lead solicitations lawful without consumer consent.
HPPA
The Homebuyers Privacy Protection Act — H.R. 2808, Public Law 119-36, signed September 5, 2025, effective 180 days later (≈ March 4, 2026). It restricts when credit bureaus may sell a mortgage trigger lead to a third party.
Mini-TCPA
A state telemarketing statute that is stricter than the federal TCPA — for example Florida’s and Oklahoma’s. These laws can impose their own consent standards and private rights of action, so federal compliance alone is not enough.
One-to-One Consent
The FCC rule that would have required a consumer’s TCPA consent to name a single specific seller. It was vacated by a federal appeals court in 2025 before taking effect — but state mini-TCPAs and the underlying PEWC standard still govern.
Permissible Purpose
The FCRA requirement that a consumer report may only be furnished for an enumerated reason. A “firm offer of credit or insurance” not initiated by the consumer is one such permissible purpose.
Other Topics
The Operator’s Compliance Brief
What changed in lead-gen compliance, and what to do about it. Free, no spam.