VPPA Legislative Risk
By Julie Oberweis, COO | December 12, 2023
I could write a long post about the history of the Video Protection Privacy Act (VPPA) since its enactment in 1988, but why bother when we have people like Tim Peterson at Digiday who are willing to create informative and entertaining versions.
A couple points that I want to add or clarify:
- As Tim Peterson pointed out, risk occurs when title of the video is passed to a 3rd party tracker such as the Meta (Facebook) Pixel or Google.
- The law does not just apply to videos provided by streaming services. A case could be made that there is risk to any site providing any video content – and class action suits are already being filed against enterprise websites in dozens of industries. Cases and settlements are surging.
So how do you protect yourself from complaints? Simple: just don’t allow your vendors to collect title of videos. But getting there might not be quite so simple. Depending on the amount of video content and the prevalence of digital marketing technologies across your site, you may be fighting an uphill battle.
Maintaining VPPA Compliance
The first step to reducing risk is understanding the issues you might need to tackle. Auditing your site to identify which pages have video players on them and what trackers have been placed on those pages is a bare minimum. Once you have that information you can take out your scalpel and decide whether you really need trackers on pages with videos, and determine whether the title of the video is being made available to trackers.
You may even want to carefully monitor the data transfers on pages with video players, looking for the titles of the videos to ensure they are not being transferred to third parties without your knowledge and explicit permission.
Lastly, you might consider building up a historical record of your good behavior, periodically (perhaps daily) collecting all request data across your pages with video players to show that you are not allowing improper data collection. This record will help in case you do need to respond to a complaint letter accusing your site of VPPA violations.
Vault JS VPPA Risk Monitoring
If you are wondering how to tackle your VPPA concerns, read more on how Vault JS can help here. Or contact us for a complimentary review of your site’s video risk.
More Vault JS Insights
Server-Side Fingerprinting Explained: How Tracking Works Without Cookies
Server-side fingerprinting links user sessions even when browser signals change. This post explains how it works, why traditional defenses fail, and the risks it creates...
Read More
IAB Multi-State Privacy Agreement (MSPA) Update 2026: What Advertisers Need to Know
A report out of Carnegie Mellon’s School of Public Policy found that “87% (216 million of 248 million) of the population in the United States...
Read More
Beyond the Policy: 2025 GDPR Enforcement Trends and the Rise of Operational Accountability
By 2025, European regulators made a clear shift in approach: compliance is no longer judged by the wording of a privacy policy, but by the...
Read More