The Homebuyers Privacy Protection Act (H.R. 2808) restricts when credit reporting agencies can share consumer credit reports with third parties during residential mortgage transactions. It allows sharing only if there's a firm offer of credit or insurance and either the third party has the consumer's consent, or the third party is directly involved with the consumer's mortgage or has a banking relationship with them. These rules will be enforced 180 days after the bill becomes law.