The VPPA (Video Privacy Protection Act) is a US federal law that restricts how a service may disclose personally identifiable information about what videos a consumer watched. Originally from 1988, it has become highly relevant to streaming, especially around sharing viewing data with third parties such as advertising and analytics tags.
For OTT operators it has real engineering and legal consequences: pixels and SDKs that leak titles watched to ad platforms have driven a wave of VPPA litigation. Compliance means careful consent handling and data governance around viewing records, and it sits alongside broader privacy regimes like GDPR and CCPA that govern personal data more generally.
