Congress restricts mortgage data sharing without consumer consent
S. 1467 — Homebuyers Privacy Protection Act · Filed by Jack Reed (D-RI) · 45 cosponsors · Introduced Apr 10, 2025 · Passed chamber
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill amends the Fair Credit Reporting Act to restrict when credit reporting agencies can share consumer credit reports with third parties in connection with mortgage lending. Specifically, when a lender requests a credit report for a mortgage application, the agency cannot share that report with another company unless that company either has the consumer's written permission, already services the consumer's mortgage, or is a bank/credit union holding an account for that consumer. The bill aims to prevent mortgage lenders from selling or sharing consumer data to unrelated third parties without explicit consent.
Why we flagged it
The bill's operative mechanism is a restriction on data sharing by credit reporting agencies in the mortgage context, designed to protect consumer privacy and limit unsolicited solicitations. It is fundamentally a privacy-limiting measure, not a deregulation or subsidy.
What the text implies
- May reduce the volume of prescreened credit offers reaching consumers, potentially lowering marketing efficiency for lenders and credit card issuers seeking mortgage-qualified borrowers.
- Could narrow the secondary market for consumer data derived from mortgage inquiries, affecting data brokers and marketing firms that currently monetize prescreening lists.
The full analysis lists 4 implications of this text.
Who it affects
Ordinary consumers gain privacy protection and control over their financial data — lenders can no longer freely share mortgage-related credit reports with unrelated third parties for marketing or other purposes without consent. This reduces unwanted solicitations and data brokerage while preserving legitimate servicer and account-holder access.