The VPPA (Video Privacy Protection Act) is a US federal law that restricts how a service may disclose personally identifiable information about what videos a consumer watched. Originally from 1988, it has become highly relevant to streaming, especially around sharing viewing data with third parties such as advertising and analytics tags.
For OTT operators it has real engineering and legal consequences: pixels and SDKs that leak titles watched to ad platforms have driven a wave of VPPA litigation. Compliance means careful consent handling and data governance around viewing records, and it sits alongside broader privacy regimes like GDPR and CCPA that govern personal data more generally.
The handbook · 7 volumes
Fora Soft Video Engineering Handbook
VPPA risk usually starts in the player, where analytics and ad tags quietly share what a person watched. Our seven-volume handbook covers the full video stack, and for teams auditing VPPA exposure Volume 3 is the place to start: players, QoE monitoring, DRM and the economics of streaming. Volumes 1 and 2 cover encoding and delivery behind it. Written by Nikolay Sapunov, CEO at Fora Soft.
Not sure which viewing data your player and SDKs send to third parties under VPPA?
We will review your player, analytics and ad SDK data flows and give you a list of VPPA exposure points with concrete fixes. 250+ video products shipped since 2005.
