Trigger Lead Legislation & Updates
Stay informed on trigger lead legislation and how it impacts your mortgage business. Here's what you need to know about the new regulations and how to keep your pipeline full with relationship-based marketing, owned channels, and compliant lead sources.
| October 6, 2026
GAO Reports Early Findings on Trigger Lead Restrictions
The Government Accountability Office released its report on mortgage trigger leads, which the Homebuyers Privacy Protection Act required Congress to receive after the law's enactment. The report, GAO-27-108874, found that before the law took effect, credit bureaus could sell information about consumers who applied for a mortgage without their consent, which could lead to dozens of unsolicited calls and texts. Survey data reviewed by GAO suggests no more than 3.5 percent of homebuyers obtained a loan through a trigger lead offer.
GAO said not enough time has passed to measure the law's effects, though it found the restrictions may help reduce unwanted solicitations while preserving borrowers' ability to compare offers. The report does not create new requirements.
What This Means for You
No action is required. The report reinforces the direction of current law: trigger leads may only go to lenders that have the consumer's authorization, or that already originate, service, or hold an account for that consumer. Continue reviewing any prescreen or marketing lists you use to confirm they meet these limits, and expect continued attention from regulators and Congress as more data becomes available.
| March 4, 2026
Homebuyers Privacy Protection Act Takes Effect
The federal restrictions on mortgage trigger leads took effect 180 days after the Homebuyers Privacy Protection Act was signed. Credit bureaus may no longer furnish mortgage trigger leads except to lenders with the consumer's authorization, or to the consumer's current mortgage originator, current mortgage servicer, or a bank or credit union holding a current account for the consumer.
What This Means for You
If you purchase prescreened mortgage leads, confirm that every lead you receive falls within one of these exceptions. Lenders that do not meet an exception can no longer receive trigger leads tied to a consumer's mortgage credit inquiry.
Arkansas Enacts Trigger Lead Restrictions
Arkansas House Bill 1184 went into effect, prohibiting the use of mortgage trigger leads in a misleading or deceptive manner. The law requires lenders to disclose six specific items in initial consumer communications, including the MLO's name and company, how they obtained contact information, that the data was purchased without the original lender's knowledge, and that they are not affiliated with the consumer's initial lender. The law also prohibits contacting consumers on Do-Not-Call registries or those who opted out of prescreened credit offers.
Senate Approves Legislation
The Senate passed the House version of H.R. 2808 by unanimous consent, sending the bill to the President's desk. The swift passage demonstrated rare bipartisan agreement on consumer privacy protection in mortgage lending.
Idaho and Iowa Implement Trigger Lead Laws
Idaho House Bill 149 and Iowa House File 857 both took effect, prohibiting unfair or deceptive practices when using trigger leads. Both states require lenders to clearly state in the initial solicitation that they are not affiliated with the consumer's original lender and that the information was purchased from a credit bureau. Idaho's law also requires compliance with FCRA's prescreened offer provisions and prohibits contacting consumers who have opted out.
House Passes Trigger Lead Ban
The House of Representatives passed H.R. 2808 by voice vote, marking a significant step toward consumer privacy protection. The bill moved forward with strong bipartisan support from both mortgage industry groups and consumer advocates.
Georgia Restricts Trigger Lead Usage
Georgia House Bill 240 became effective, prohibiting specific unfair or deceptive practices when using trigger leads. The law requires lenders to state in initial solicitations that they are not affiliated with the consumer's original lender and that they must comply with federal prescreened offer requirements, including making a firm offer of credit. The law applies to all persons transacting mortgage business in Georgia, whether licensed or exempt from licensing.
Bipartisan Legislation Introduced
Bipartisan bills H.R. 2808 and S. 1467 were introduced in both chambers of Congress with support from the Mortgage Bankers Association, National Association of Mortgage Brokers, and consumer advocacy groups. The legislation aimed to amend the FCRA to restrict trigger leads to only those with consumer consent or an existing relationship with the borrower.
Trigger Leads Operating Under FCRA
Trigger leads were generated whenever a consumer's credit report was pulled for a mortgage inquiry, with credit bureaus selling this data to competing lenders. This resulted in unsolicited calls, texts, and emails reaching borrowers within hours of their credit pull. The practice was legal under the Fair Credit Reporting Act (FCRA) if used for firm offers of credit, but faced widespread criticism for consumer confusion, privacy concerns, and pipeline disruption.
