Adds a privacy limit on prescreened consumer reports used in residential mortgage lending: consumer reporting agencies generally may not share a consumer report obtained for a mortgage credit transaction with another party unless the sharing is for a firm offer of credit/insurance or the other party provides documentation that the consumer authorized the disclosure. Key terms (credit union, insured depository institution, residential mortgage loan, servicer) are defined. The law takes effect 180 days after enactment.