Editing Video Privacy Protection Act

{{Short description|1988 American law on tape rental privacy}}
{{use mdy dates |date=September 2020}}
{{Infobox U.S. legislation
| shorttitle = Video Privacy Protection Act of 1988
| othershorttitles = 
| longtitle = An act to amend title 18, United States Code, to preserve personal privacy with respect to the rental, purchase, or delivery of video tapes or similar audio visual materials.
| colloquialacronym = VPPA
| nickname = 
| enacted by = 100th
| effective date = November 5, 1988
| public law url = 
| cite public law = {{uspl|100|618}}
| cite statutes at large = {{usstat|102|3195}}
| acts amended = 
| acts repealed = 
| title amended = Title 18 of the United States Code
| sections created = {{USC|18|2710}}
| sections amended = 
| leghisturl = 
| introducedin = Senate
| introducedbill = {{USBill|100|S.|2361}}
| introducedby = [[Patrick Leahy]] ([[Democratic Party (United States)|D]]-[[Vermont|VT]])
| introduceddate = May 10, 1988
| committees = [[United States Senate Committee on the Judiciary]]
| passedbody1 = Senate
| passeddate1 = October 14, 1988
| passedvote1 = voice vote
| passedbody2 = House
| passedas2 = 
| passeddate2 = October 19, 1988
| passedvote2 = voice vote
| conferencedate = 
| passedbody3 = 
| passeddate3 = 
| passedvote3 = 
| agreedbody3 = <!-- used when the other body agrees without going into committee -->
| agreeddate3 = <!-- used when the other body agrees without going into committee -->
| agreedvote3 = <!-- used when the other body agrees without going into committee -->
| agreedbody4 = <!-- used if agreedbody3 further amends legislation -->
| agreeddate4 = <!-- used if agreedbody3 further amends legislation -->
| agreedvote4 = <!-- used if agreedbody3 further amends legislation -->
| passedbody4 = 
| passeddate4 = 
| passedvote4 = 
| signedpresident = [[Ronald Reagan]]
| signeddate = November 5, 1988
| amendments = {{uspl|112|258}}
| SCOTUS cases = 
| unsignedpresident = 
| vetoedpresident = 
}}

The '''Video Privacy Protection Act (VPPA)''' is a bill that was passed by the [[United States Congress]] in 1988 as {{USPL|100|618}} and signed into law by President [[Ronald Reagan]]. It was created to prevent what it refers to as "wrongful disclosure of video tape rental or sale records"<ref>{{USC|18|2710}}: Wrongful disclosure of video tape rental or sale records</ref> or similar audio visual materials, to cover items such as [[video games]].<ref>{{cite web | title=EPIC Video Privacy Protection Act Page | work=Electronic Privacy Information Center | url=http://www.epic.org/privacy/vppa/ | access-date = 2005-03-03}}</ref> Congress passed the VPPA after [[Robert Bork]]'s [[Bork tapes|video rental history]] was published during [[Robert Bork Supreme Court nomination|his Supreme Court nomination]] and it became known as the "'''Bork bill'''".<ref>{{Cite web |date=2012-08-14 |title=Dodging the Thought Police: Privacy of Online Video and Other Content Under the "Bork Bill" |url=https://jolt.law.harvard.edu/digest/dodging-the-thought-police-privacy-of-online-video-and-other-content-under-the-bork-bill |access-date=2023-09-07 |website=Harvard Journal of Law & Technology |language=en}}</ref> It makes any "video tape service provider" that discloses rental information outside the [[ordinary course of business]] liable for up to $2,500 in actual damages unless the consumer has consented, the consumer had the opportunity to consent, or the data was subject to a court order or warrant.

In 2013, the law was amended to add provisions allowing consumers to electronically consent to sharing video rental histories and to extend the time that consent can last to up to two years.<ref>{{cite_web|title=PUBLIC LAW 112–249—JAN. 10, 2013|url=https://www.congress.gov/112/statute/STATUTE-126/STATUTE-126-Pg2414.pdf|access-date=2024-04-12|language=en|website=Congress.gov}}</ref> The law became a focus of attention in the legal industry once again in the twenty-first century with the rise of audiovisual content sharing through digital media. Its revival is part of a trend in the filing of consumer privacy class actions, both through new laws like the [[California Consumer Privacy Act]] and older laws like the VPPA and [[Electronic Communications Privacy Act|wiretapping]] statutes.

==Computer-based VPPA litigation==

Toward the end of the 2010's and beginning of the 2020's, the 1988 law experienced a resurgence in consumer class action lawsuits. The numerous lawsuits filed as part of this trend alleged that companies violated the VPPA by collecting and disclosing consumers' video viewing history through their websites, [[mobile apps]], and other [[smart devices]]. 

While the language of the VPPA focuses on "video tape service providers," consumers have argued that the law also protects the privacy of their personal information that is collected while they watch audiovisual content online. [[HTTP cookie|Cookies]] and other website behavior [[web beacons|tracking technologies]] commonly found on popular websites allow the website operators to connect visitors' browsers with third parties who collect information from their website visit. This information can be shared with the third parties for various purposes including website functionality, language preferences and other personalization, and third party advertising.<ref>{{cite journal|last1=Kesan |first1=Jey |last2=Shah |first2=Rajiv |ssrn=597543 |title=Deconstructing Code |date=2018-08-19 |journal=Yale Journal of Law and Technology |volume=6 |pages=277–389}}</ref> The recent resurgence of VPPA lawsuits is premised on the idea that data collected through the various tracking technologies may include personal information protected by the VPPA. Consumer plaintiffs assert that if that information is shared with third parties for analytics, advertising, or any other purpose that falls outside the exceptions in the VPPA, it is unlawful.
 	
Prior to 2007, VPPA had not been cited by privacy attorneys as a cause of action involving electronic [[computing device]]s. Early lawsuits raising the VPPA in the context of data shared through the internet included a 2008 lawsuit against Facebook and thirty-three companies, including [[Blockbuster LLC|Blockbuster]], [[Zappos]], and [[Overstock.com]], as well as the ''[[Lane v. Facebook, Inc.]]'' class action lawsuit, involving alleged [[privacy violations]] caused by the [[Facebook Beacon]] program.<ref>{{cite news |url=https://www.computerworld.com/article/2536627/blockbuster-sued-over-facebook-beacon-information-sharing.html |title=Blockbuster sued over Facebook Beacon information sharing |work=[[Computerworld]] |date=April 18, 2008 |first=Jaikumar |last=Vijayan}}</ref><ref name=LaneAppeal>{{cite court |litigants=Lane v. Facebook, Inc. |litigants-force-plain= |vol=696 |reporter=F.3d |opinion=811 |pinpoint= |court=9th Cir. |date=2012 |url=https://www.courtlistener.com/opinion/808885/ginger-mccall-v-facebook-inc/ |quote= |postscript= }}</ref>

The [[online advertising]] industry, in association with analytic companies, increasingly used video-based ads and at the same time gathered data from webpages and smart TV's showing digital video. By tracking web traffic online, consumers and their attorneys gather evidence of the data being collected by third parties through cookies and other tracking technologies when a person visits a website. Consumers use that traffic analysis to determine whether their protected personal information has been shared with third parties when they visited a particular website. For example, attorneys use software applications to log [[HTTPS|HTTP/HTTPS]] traffic between a computer's web browser and the Internet to produce evidence of tracking activities. This approach led to a $9.5 million settlement in the ''[[Lane v. Facebook, Inc.]]'' case.<ref name=LaneAppeal/><ref>{{cite_web|title=Supreme Court Won’t Review Facebook Beacon Class Action Settlement|author=Sarah Mirando|date=2013-11-04|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/supreme-court-won-t-review-facebook-beacon-class-action-settlement/|language=en}}</ref>

VPPA rulings rarely survive appeal, so the ''Pharmatrak'' case (2003) remains the most significant precedent.<ref>{{cite web|first1=Eric|last1=Goldman|access-date=2025-05-06|title=Meta Pixels Case Dismissed by Second Circuit-Solomon v. Triller|url=https://blog.ericgoldman.org/archives/2025/05/meta-pixels-case-dismissed-by-second-circuit-solomon-v-triller.htm|date=2025-05-05|website=Technology & Marketing Law Blog}}</ref>

==2013 Amendments==
Following VPPA litigation against [[Netflix]]<ref>{{cite news |last=Singel |first=Ryan |url=https://www.wired.com/2009/12/netflix-privacy-lawsuit/ |title=Netflix Spilled Your Brokeback Mountain Secret, Lawsuit Claims |work=Wired Magazine |date=December 17, 2009 }}</ref> and other digital media industry giants, in January 2013, President [[Barack Obama]] signed into law H.R. 6671 amending the VPPA. The amendments allow video rental companies to share rental information on social networking sites after obtaining customer permission. 

Netflix, which had expressed concerns about violating the VPPA with its increasingly social video viewing services, reportedly lobbied for the change.<ref>{{cite news |title=Obama signs Netflix-backed amendment to video privacy law |url=https://www.cnet.com/news/obama-signs-netflix-backed-amendment-to-video-privacy-law/ |first=Steven |last=Musil |website=[[CNET]] |date=January 10, 2013 |access-date=June 18, 2015 }}</ref> Netflix cited the VPPA in 2011 following the announcement of its global integration with Facebook. The company noted that the VPPA was the sole reason why the new feature was not immediately available in the United States, and encouraged its customers to contact their representatives in support of legislation that would clarify the language of the law.<ref>{{cite web |title=Help Us Bring Facebook Sharing to Netflix USA |work=Netflix Blog |url=http://blog.netflix.com/2011/09/help-us-bring-facebook-sharing-to.html |archive-url=https://web.archive.org/web/20110923181836/http://blog.netflix.com/2011/09/help-us-bring-facebook-sharing-to.html |access-date=2011-09-22|archive-date=September 23, 2011 }}</ref> In 2012, Netflix changed its privacy rules so that it no longer retained records for people who have left the site, a change that was reported to have been inspired by VPPA litigation.<ref>{{cite news |url=https://arstechnica.com/tech-policy/2012/07/class-action-lawsuit-settlement-forces-netflix-privacy-changes/ |title=Class-action lawsuit settlement forces Netflix privacy changes |work=Ars Technica |date=July 31, 2012 }}</ref> 

Further results of VPPA litigation after the passage of these amendments were initially mixed. In 2015, the [[United States Court of Appeals for the Eleventh Circuit]] found that the law's protections do not reach the users of a free Android app, even when the app assigns each user a unique identification number and shares user behavior with a third party data analytics company.<ref name=Ellis>{{cite court |litigants=Ellis v. Cartoon Network, Inc. |litigants-force-plain= |vol=803 |reporter=F.3d |opinion=1251 |pinpoint= |court=11th Cir. |date=2015 |url=https://www.courtlistener.com/opinion/3009101/mark-ellis-v-the-cartoon-network-inc/ |quote= |postscript= }}</ref><ref name=harvard>{{cite journal |url=https://harvardlawreview.org/2016/05/ellis-v-cartoon-network-inc/ |title=Ellis v. Cartoon Network, Inc.: Eleventh Circuit Limits the Scope of "Subscriber" for VPPA Protections |volume=129 |journal=[[Harvard Law Review]] |date=May 10, 2016 |page=2011 }}</ref>

==References==
{{Reflist}}

{{Presidency of Ronald Reagan}}

[[Category:1988 in American law]]
[[Category:United States federal privacy legislation]]
[[Category:Computer law]]