SB 933 targets how mortgage "trigger leads" — consumer reports or related data pulled after a credit inquiry for a real-estate-secured loan — can be used by lenders, brokers, and lead purchasers in California. The bill defines when a consumer report qualifies as a mortgage trigger lead, excludes reports obtained by the original lender or an existing servicer, and then prohibits a set of practices the Legislature characterizes as unfair, deceptive, or abusive.
The practical effects are compliance and litigation risk for firms that buy or use lead data: the bill requires a clear, conspicuous non-affiliation disclosure at first contact, demands compliance with federal prescreen firm-offer rules and Do-Not-Call/opt-out signals, bans bait-and-switch marketing, and converts violations into unlawful practices under the state’s Unfair Competition Law with both public and private enforcement avenues.
At a Glance
What It Does
Defines "mortgage trigger lead" as a consumer report obtained under FCRA Section 1681b triggered by a credit inquiry for a real-estate-secured loan, then bars unfair, deceptive, or abusive uses of those leads including failure to disclose non-affiliation, misuse after opt-out or Do-Not-Call registration, and bait-and-switch offers.
Who It Affects
Mortgage lenders, brokers, originators, lead vendors, and nonbank marketers that obtain or act on consumer reports tied to mortgage credit inquiries; consumer reporting agencies that supply those reports will face changed downstream usage of their products.
Why It Matters
It overlays California consumer-protection rules onto a subset of FCRA-based leads, creating explicit state compliance duties, a private right of action, and potential for expanded enforcement — increasing legal and operational risk in the mortgage lead market.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
SB 933 starts by drawing a tight definition: a "mortgage trigger lead" is a consumer report or related data obtained from a consumer reporting agency under federal law (15 U.S.C. §1681b) when the request follows a credit inquiry tied to a real-estate-secured loan application. That definition purposely carves out two situations: the consumer report a borrower’s chosen lender pulls when the borrower directly applies, and reports used by a servicer or creditor for an existing account.
Practically, the bill targets third-party lead purchasers and marketers, not the originating lender servicing an existing loan.
The bill then enumerates specific conduct that the Legislature deems unfair, deceptive, or abusive when using these leads. The most direct operational requirement is a mandated, clear, and conspicuous disclosure at the initial point of contact that the institution is not affiliated with the consumer’s original lender or broker.
SB 933 also demands that firms comply with applicable federal prescreen rules (including obligations tied to offering firm offers of credit) and prohibits use of consumer information where the consumer has validly opted out of prescreened offers or is listed on the federal Do-Not-Call registry.Separate from prescreen and Do-Not-Call compliance, the bill targets marketing practices: it defines bait-and-switch conduct as offering specific rates, terms, or costs and then changing those terms to the consumer’s detriment unless the change is clearly disclosed and justified. That language puts a spotlight on how rates and terms are advertised in initial outreach and forces sellers to document the basis for any subsequent adjustments.
SB 933 converts violations into unlawful business practices under California’s Unfair Competition Law, authorizes enforcement by the Attorney General, the Commissioner of Financial Protection and Innovation, and local prosecutors, and preserves a private right of action for consumers seeking damages, injunctions, and attorney’s fees.For compliance teams, the bill creates several operational tasks: identify which purchased lists are tied to FCRA §1681b inquiries, ensure initial-contact scripts and disclosures exist and are consistently used across channels, implement validation processes for prescreen opt-out flags and Do-Not-Call status, and review marketing copy and rate-quote workflows to avoid post-contact adjustments that could be characterized as bait-and-switch. Because the bill relies on both statutory definitions and consumer-protection standards, it builds in some enforcement flexibility that will likely be filled in by regulators and courts.
The Five Things You Need to Know
The bill defines a "mortgage trigger lead" as a consumer report or related data obtained under 15 U.S.C. §1681b when the request follows a credit inquiry for a real-estate-secured loan.
Reports pulled by the consumer’s direct lender or by a servicer/creditor of an existing account are excluded from the mortgage trigger lead definition.
SB 933 requires a clear, conspicuous disclosure at the initial point of contact informing the consumer that the contacting institution is not affiliated with the consumer’s original lender or broker.
The bill bars using lead-derived consumer information if doing so violates a consumer’s federal prescreen opt-out, the federal Do-Not-Call registry, or the federal prescreen/firm-offer rules.
Violations are treated as unlawful practices under California’s UCL and can be enforced by the Attorney General, the DFPI Commissioner, local prosecutors, and by consumers through a private right of action for damages, injunctive relief, and attorney’s fees.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Definitions: consumer report, financial institution, and mortgage trigger lead
This subsection sets the statutory boundaries. It borrows the federal FCRA definition of "consumer report," expands "financial institution" to include depository and nondepository lenders (explicitly naming mortgage brokers and originators under California law), and then pins "mortgage trigger lead" to reports obtained under FCRA §1681b following a credit inquiry for a real-estate-secured loan. The subsection also narrows scope by excluding reports pulled by the lender the consumer applied to and reports used by a servicer or existing creditor, focusing the rule on third-party lead flows.
Initial-contact non-affiliation disclosure
The bill requires financial institutions to disclose, clearly and conspicuously at the initial point of contact, that they are not affiliated with the consumer’s original lender or broker. That obligation targets the common sales practice where lead buyers impersonate or imply affiliation with a consumer’s prior lender; the operative phrase "initial point of contact" will raise compliance questions across channels (call, text, email) about timing, script content, and recordkeeping.
Prescreen compliance and opt-out/Do-Not-Call protections
SB 933 mandates that firms using mortgage trigger leads follow all applicable state and federal prescreened solicitation laws, expressly including obligations tied to firm offers of credit. It also prohibits using consumer information where doing so would violate a consumer’s prescreen opt-out status under federal law or a consumer’s registration on the federal Do-Not-Call list. Mechanically, that means purchasers of leads must obtain and respect opt-out flags and Do-Not-Call indicators or otherwise refrain from outreach, creating upstream data and vendor-contracting implications.
Bait-and-switch marketing ban
The bill outlaws bait-and-switch practices in lead-driven outreach by prohibiting offers that advertise particular rates, terms, or costs and then change those terms to the consumer’s detriment unless the change was clearly disclosed and justified. This places a burden on firms to substantiate advertised quotes and to design downstream underwriting and pricing processes that don’t produce worse terms without transparent notice and a defensible rationale.
UCL enforcement and private right of action
Violations count as unlawful, unfair, or deceptive business practices under California’s Unfair Competition Law (Section 17200). The Attorney General, the Commissioner of Financial Protection and Innovation, and local prosecutors receive enforcement authority, and the statute creates a private right for consumers to seek damages, injunctive relief, and attorney’s fees "in accordance with applicable law." That combination of public and private enforcement increases civil liability risk and creates parallel enforcement pathways.
This bill is one of many.
Codify tracks hundreds of bills on Finance across all five countries.
Explore Finance in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Borrowers and consumers who recently shopped for mortgages — they gain explicit protections against deceptive outreach, unwanted prescreened solicitations, and telemarketing when they’ve opted out or registered on Do-Not-Call lists.
- Consumers seeking clearer disclosure — the initial-contact non-affiliation requirement improves transparency so consumers can better judge the source and motives of mortgage offers.
- Compliance-focused lenders and brokers — firms that already follow prescreen rules and maintain documented marketing processes benefit competitively by differentiating themselves from high-volume lead buyers that cut corners.
- State regulators and enforcement agencies — the bill gives the Attorney General and the DFPI Commissioner explicit statutory hooks to police lead-market abuses.
Who Bears the Cost
- Lead buyers, telemarketers, and nonbank mortgage marketers — they must update scripts, data pipelines, and vendor contracts to capture and honor prescreen opt-outs and Do-Not-Call indicators and to add initial-contact disclosures.
- Consumer reporting agencies and data brokers — their products may need labeling, new metadata, or contractual restrictions documenting whether a list is derived from an FCRA §1681b inquiry and conveying opt-out status to downstream buyers.
- Small mortgage brokers and originators that rely on purchased leads — compliance and documentation burdens may raise operating costs or reduce access to lower-cost lead sources.
- Financial institutions facing litigation exposure — the private right of action and UCL classification increase the risk of class, representative, or individual suits alleging deceptive or abusive use of leads.
Key Issues
The Core Tension
The bill tries to balance consumer protections against deceptive lead-driven outreach with preserving legitimate marketing that connects borrowers to competing mortgage offers; the tension is that tighter rules and private enforcement reduce abusive practices but also increase compliance costs and litigation risk, potentially chilling benign outreach that can lower borrower costs.
SB 933 raises several implementation and interpretation questions that agencies and courts will have to resolve. First, the bill ties its scope to consumer reports obtained under FCRA §1681b, but many lead products are hybrids — derived scores, merchant-supplied profiles, or otherwise transformed data that vendors may argue fall outside that statutory phrase.
Determining which products are "mortgage trigger leads" will require line-drawing between raw consumer reports and downstream marketing derivatives, with significant commercial consequences.
Second, key operative terms are open to interpretation. "Initial point of contact" is critical to the disclosure duty but can vary by channel; mandatory disclosure timing and acceptable content will require guidance. The bait-and-switch carve-out — "unless clearly disclosed and justified" — gives firms a defense, but what counts as adequate justification for changing quoted terms (updated underwriting data, rate movements, clerical errors) is uncertain.
Finally, enforcing prescreen opt-outs and Do-Not-Call status creates operational complexity: lead sellers may not pass opt-out flags to buyers, and verifying registry status in real time across communication channels is nontrivial. Those gaps are fertile ground for litigation and regulatory guidance.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.