VPPA pixel lawsuits

What the VPPA protects

The Video Privacy Protection Act is codified at 18 U.S.C. Section 2710. The statute addresses a video tape service provider knowingly disclosing personally identifiable information concerning its consumer, subject to permitted disclosures. Its definitions include providers engaged in renting, selling, or delivering prerecorded video tapes or similar audiovisual materials. The older terminology does not eliminate the need to analyze those definitions in an online dispute. Section 2710(a)-(b).

A pixel allegation often concerns a transmission that connects a person's identifier with a particular video. The relevant question is not simply whether the website contains video content. It is whether the alleged conduct and the parties satisfy the statute as applied by the relevant court.

The questions a claim raises

The statute's definitions and prohibition separate several issues that should remain distinct in a defense-side review. Read the statutory text.

• Provider status. Is the defendant engaged in the business covered by the video-provider definition? An embedded player is a factual starting point, not a complete answer.
• Consumer status. Is the person a renter, purchaser, or subscriber of goods or services from the provider? Describe the actual relationship rather than equating every visitor with a statutory consumer.
• Identifiable viewing information. Does the alleged disclosure identify a person as requesting or obtaining specific video materials or services? The video and the asserted identifying information must be examined together.
• Knowing disclosure. What was allegedly disclosed, to whom, and what facts support knowledge? Software installation alone does not establish every part of that allegation.
• Permission or exception. Does a permitted disclosure apply? Consent and the ordinary-course-of-business exception each have their own statutory language.

These questions organize the analysis. They are not a claim that every court uses identical formulations or reaches the same result on every identifier.

Why the consumer relationship matters

A free service can still raise a consumer-status question. Payment is not the only relationship listed in the definition, which also includes subscribers. At the same time, a person watching a publicly available video should not automatically be called a subscriber without considering the relationship and the governing law. Section 2710(a)(1).

Two dated appellate decisions illustrate why the issue deserves separate attention. In Salazar v. NBA, decided October 15, 2024, the Second Circuit held that the pleaded exchange of personal information for an online newsletter plausibly made the plaintiff a subscriber. It rejected limiting the relevant goods or services to audiovisual offerings and remanded the case; it did not decide that every alleged disclosure established liability. Read the opinion.

In Salazar v. Paramount Global, decided April 3, 2025, the Sixth Circuit affirmed dismissal because the newsletter subscription did not qualify under its audiovisual-focused reading of the consumer definition. It separately recognized standing on the allegations before it. Read the opinion.

These are dated examples, not a comprehensive statement of the current procedural status or a nationwide rule. Check later decisions, appellate developments, and controlling authority before relying on either in a matter.

A video event is not the whole disclosure

Section 2710 defines personally identifiable information to include information identifying a person as having requested or obtained specific video materials or services from a provider. An event name such as playback, an identifier, and a video title are separate facts; an analysis must explain how the disclosed information connects them. Section 2710(a)(3).

Do not treat a generic device value as automatically identifying a particular person. Conversely, do not assume that information cannot identify someone just because it does not spell out a name. The relevant identifier, recipient, video information, and governing interpretation need to be assessed together. The browser's outgoing record also does not establish every later recipient-side inference or use.

Consent has specific requirements

The VPPA permits disclosure with informed, written consent, including electronic consent, that meets the statute's requirements. The consent form must be distinct and separate from forms setting out other legal or financial obligations. The statute addresses when consent may be given, limits advance consent to a set period not exceeding two years or earlier withdrawal, and requires a clear opportunity to withdraw. Section 2710(b)(2)(B).

A generic accept-cookies action therefore should not be labeled sufficient VPPA consent without reviewing the actual language and mechanism. Other exceptions also require care. The statutory definition of ordinary course of business is limited to debt collection, order fulfillment, request processing, and transfer of ownership; it is not a blanket label for anything a business routinely does. Sections 2710(a)(2) and (b)(2).

A hypothetical video journey

Suppose a newsletter subscriber opens a public video and a request carries both the video URL and a person-linked account identifier to a third party. This is a hypothetical example, not evidence about a particular website or a prediction of liability.

The request gives the parties something concrete to investigate. It still leaves separate questions about provider status, the subscription relationship, identification, knowledge, and consent. If the same request contains only a generic page category with no specific video information, the facts differ. If it occurs before any playback, avoid calling it proof of actual viewing without additional support.

Remedies are not automatic

Section 2710(c) authorizes a civil action and lists relief a court may award, including actual damages with a $2,500 liquidated-damages floor, punitive damages, reasonable attorneys' fees and litigation costs, and appropriate equitable relief. The statute also specifies a two-year period measured from the act complained of or discovery. These provisions do not establish a guaranteed payment merely because a pixel is found. Liability, applicable interpretation, and procedural requirements remain separate questions. Section 2710(c).

Common questions

Does every website with video fall under the VPPA?

No. Analyze the statutory provider definition and the business involved. The existence of a player does not independently establish provider status or the remaining elements of a claim.

Does a Meta Pixel video event prove a violation?

No. A captured event is evidence of an observed technical action, not a determination of consumer status, identifiable viewing information, knowledge, or the absence of a permitted disclosure.

What belongs in a separate evidence review?

Preserve the specific video, asserted consumer relationship, account state, outgoing request, recipient, identifier, and consent record. The VPPA evidence checklist covers preservation separately. For a different statute, read the CIPA Section 631 explainer.

Sources and scope

The principal source is 18 U.S.C. Section 2710. The dated consumer-status examples cite the Second Circuit's 2024 NBA opinion and Sixth Circuit's 2025 Paramount opinion. This article is educational information for defense-side review, not legal advice, a complete case-law survey, or a conclusion about any website's liability.