VPPA Legislative Risk
By Julie Oberweis, COO | December 12, 2023
I could write a long post about the history of the Video Protection Privacy Act (VPPA) since its enactment in 1988, but why bother when we have people like Tim Peterson at Digiday who are willing to create informative and entertaining versions.
A couple points that I want to add or clarify:
- As Tim Peterson pointed out, risk occurs when title of the video is passed to a 3rd party tracker such as the Meta (Facebook) Pixel or Google.
- The law does not just apply to videos provided by streaming services. A case could be made that there is risk to any site providing any video content – and class action suits are already being filed against enterprise websites in dozens of industries. Cases and settlements are surging.
So how do you protect yourself from complaints? Simple: just don’t allow your vendors to collect title of videos. But getting there might not be quite so simple. Depending on the amount of video content and the prevalence of digital marketing technologies across your site, you may be fighting an uphill battle.
Maintaining VPPA Compliance
The first step to reducing risk is understanding the issues you might need to tackle. Auditing your site to identify which pages have video players on them and what trackers have been placed on those pages is a bare minimum. Once you have that information you can take out your scalpel and decide whether you really need trackers on pages with videos, and determine whether the title of the video is being made available to trackers.
You may even want to carefully monitor the data transfers on pages with video players, looking for the titles of the videos to ensure they are not being transferred to third parties without your knowledge and explicit permission.
Lastly, you might consider building up a historical record of your good behavior, periodically (perhaps daily) collecting all request data across your pages with video players to show that you are not allowing improper data collection. This record will help in case you do need to respond to a complaint letter accusing your site of VPPA violations.
Vault JS VPPA Risk Monitoring
If you are wondering how to tackle your VPPA concerns, read more on how Vault JS can help here. Or contact us for a complimentary review of your site’s video risk.
More Vault JS Insights
Legal Risks to Businesses
Fines and lawsuits related to data protection and privacy are a real risk for organizations in today’s environment. Enterprise websites are under particularly close scrutiny,...
Read More
Device Fingerprinting: Tracking Without Cookies or Consent
A report out of Carnegie Mellon’s School of Public Policy found that “87% (216 million of 248 million) of the population in the United States...
Read More
Tag Piggybacking — The Invisible Compliance Risk
Your enterprise website is connected to a massive, constantly changing, interconnected, and partially hidden ecosystem of JavaScript tags. Often piggybacked to each other, these tags...
Read More