California's Credit Unions and Nevada's Credit Unions logo
MEMBER LOGIN

Resources to help you navigate the changing regulatory landscape

A young father, mother, and child in the front yard of their new home.

Homebuyers Privacy Protection Act: Impact on CUs

The Homebuyers Privacy Protection Act represents a significant regulatory shift in how personal data following mortgage credit inquiries may be used and shared. Credit unions are impacted in several ways: some facing restrictions, others gain competitive advantages depending on their relationship with consumers, marketing practices and internal compliance programs.

To prepare for regulatory requirements, and turn this regulatory change into an operational advantage, credit unions should consider the following.

The Facts

  • Law signed on September 5, 2025
  • Effective date is March 2026 —180 days after its enactment
  • Amends the Fair Credit Reporting Act (FCRA)
  • Targets abusive use of mortgage trigger leads; consumer information sold after a mortgage credit inquiry

The Key Provisions

Bans most trigger leads unless:

  • Offer qualifies as a “firm offer of credit” under FCRA
  • Consumer has authorized/consented to sharing
  • Recipient is the mortgage originator/servicer
  • Recipient is a credit union or depository institution where the consumer already has an account

The Impacts

  • Credit unions can still receive leads if they hold a member’s account
  • Vendors and third-party lead generators may no longer provide compliant trigger leads
  • Must ensure “firm offers” meet FCRA standards
  • Update policies, contracts and staff training before March 2026
  • Fewer unsolicited calls builds consumer confidence in credit unions’ privacy practices

The Call to Action

  • Audit current marketing/lead programs to identify use of trigger leads
  • Update vendor agreements to reflect HPPA compliance
  • Train staff (marketing, lending, compliance) on new restrictions
  • Enhance consent processes where consumer opt-in is required
  • Monitor state laws for updates on stricter standards

For credit unions, this law offers both challenges and opportunities. The credit unions that act early will ensure compliance and position their credit union as trusted, privacy-first lenders.

Regulatory Sources

America’s Credit Unions’ Mortgage Trigger Leads

America’s Credit Unions’ Homebuyers Privacy Protections Act 

For More Information

For more information, email Heather Line.

Access the ‘Compliance Hotline’

Your League-member benefits include the Compliance Hotline — providing exclusive access to dedicated compliance experts:

Using the above phone number and email address, you can gain access to a knowledgeable team that’s ready to address all your credit union’s compliance inquiries — promptly and efficiently. With the Compliance Hotline, you can proactively respond to impromptu questions and issues by getting clarity and insight on technical topics that normally slow you down. We want to help you unlock the full potential of your League membership by leveraging the resources and support you need to navigate the complex world of compliance effortlessly. We’re ALWAYS just a phone call or email away!

Additionally, other League-member compliance resources include:

  • ViClarity
  • CU PolicyPro
  • ComplySight
  • InfoSight
  • CU Store
  • Record Retention Guide
  • GRC Technology Solutions

Powered by ViClarity, a California’s Credit Unions and Nevada’s Credit Unions company.

ALL COMPLIANCE ARTICLES