18 U.S.C. § 2710

Video Privacy Protection Act

Statute — United States Federal
Effective: November 5, 1988 100 platforms tracked 3595 provisions indexed Enforced by: Federal Courts (private right of action) Last reviewed May 9, 2026

Overview

The Video Privacy Protection Act prohibits video tape service providers from knowingly disclosing personally identifiable information about a consumer's video viewing activity without the consumer's informed, written consent. Originally enacted in response to the disclosure of a Supreme Court nominee's video rental records, the VPPA has been broadly applied to modern streaming services, social media video features, and advertising technology. The Act has become a significant source of class action litigation, particularly against platforms that share viewing data with advertising partners through tracking pixels and similar technologies without obtaining proper consent. The VPPA provides a private right of action with statutory damages.

Penalties

Actual damages (not less than $2,500 in liquidated damages), punitive damages, attorney fees, and equitable relief.

Key Articles & Sections

Platforms We Track Subject to VPPA

Recent Changes Related to VPPA

ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology

Provisions Governed by VPPA (3595 across 100 platforms)

EEA and UK right to withdraw consent Activision
Medium
California Shine the Light no third party direct marketing sharing Activision
Medium
Nevada residents right to opt out of covered information sale Activision
Medium
EEA and UK right to data portability Activision
Medium
Right to nondiscrimination for exercising privacy rights Activision
Medium
Authorized agent verification for rights requests Activision
Medium
Disclosure for exercising or defending legal rights Activision
Medium
California minor right to remove publicly posted information Activision
Medium
EEA and UK right to stop marketing messages Activision
Medium
User right to unlink third party account Activision
Medium
US resident right to request deletion of personal information Activision
Medium
US resident right to request correction of personal information Activision
Medium
Opt-out preference lost if cookies cleared or ID reset Activision
Medium
Identity verification required for privacy rights requests Activision
Medium
Disclosure of information required by law Activision
Medium
Right to unsubscribe from marketing communications Activision
Medium
Disclosure to foreign jurisdictions on good faith belief Activision
Medium
California financial information not sold or shared Activision
Medium
Transfer of data in merger or acquisition Activision
Medium
EEA and UK right to object to legitimate interest processing Activision
Medium
Username searchable by other users unless opted out Activision
Medium
User responsibility to review privacy policies of third parties Activision
Medium
Disclosure to protect safety of persons Activision
Medium
Sharing gameplay data with third party partners and licensees Activision
Medium
User right to view correct update or delete account data Activision
Medium
US resident right to request access to personal information Activision
Medium
Vendors restricted from using data for own marketing Activision
Medium
California right to limit sensitive personal information use Activision
Medium
Activision recognizes Do Not Track and Global Privacy Control Activision
Medium
European Commission approved clauses for international transfers Activision
Medium

Showing 30 of 3595 provisions. View all →

Related Regulations

Official Source

View official regulation text →

Get alerted when platforms change their policies — including VPPA-relevant provisions.

Subscribe to Monitor — $19/mo

Frequently Asked Questions

What does VPPA require?

Which platforms does VPPA apply to?

ConductAtlas tracks VPPA-relevant provisions across 100 platforms. Each platform's specific provisions are classified by severity and mapped to VPPA requirements.

How does ConductAtlas monitor VPPA compliance?

ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect VPPA obligations. Every change is archived with cryptographic verification.