ARTICLE
9 February 2026

Door Not "Shut" On VPPA Claims In Second Circuit When Data Is Legible

FK
Frankfurt Kurnit Klein & Selz

Contributor

Frankfurt Kurnit provides high quality legal services to clients in many industries and disciplines worldwide. With leading practices in entertainment, advertising, IP, technology, litigation, corporate, estate planning, charitable organizations, professional responsibility and other areas — Frankfurt Kurnit helps clients face challenging legal issues and meet their goals with efficient solutions.
Last year, the Second Circuit declared that the "door" was "effectively shut" on claims under the Video Privacy Protection Act ("VPPA") involving internet tracking tools like pixels.
United States Privacy
Peter A. Devlin’s articles from Frankfurt Kurnit Klein & Selz are most popular:
  • within Privacy topic(s)

Last year, the Second Circuit declared that the "door" was "effectively shut" on claims under the Video Privacy Protection Act ("VPPA") involving internet tracking tools like pixels. However, a recent decision from the Southern District of New York, Sutton v. TED Foundation, shows that the door remains ajar where data is disclosed in a plain, legible format.

Defendant TED is a non-profit that produces TED Talks. It operates a website and app where users can create free account to receive personalized video recommendations. The plaintiff alleges that TED uses third-party analytics tools from Leanplum, Mixpanel, and OpenWeb to collect personal information, such as names, email addresses, videos viewed, and user IDs.

The district court denied TED's motion to dismiss notwithstanding that the Second Circuit had "largely slammed [the door] shut" on new VPPA claims in Solomon. Sutton v. TED Foundation, Inc., No. 23 CIV. 9219 (DEH), 2026 WL 207000, at *5 (S.D.N.Y. Jan. 27, 2026).

Solomon requires plaintiffs to plead that the disclosed data was in a form that an "ordinary recipient" could "with little or no extra effort" identify the plaintiff's video-watching habits. Trackers like the Meta Pixel often send data in coded form that is unreadable by the lay person—making this a difficult pleading bar for most plaintiffs.

Not so in Sutton. The plaintiff alleged that TED disclosed data identifying watched videos in plain language anyone could read, not as a jumble of letters and numbers:

1742194a.jpg

1742194b.jpg

This case underscores the importance of the upcoming Supreme Court case, Salazar v. Paramount Global, where the Court recently granted cert. In Salazar, the Supreme Court will address—through the statutory question of who is a "consumer"—the scope of the VPPA and exposure for companies with video content embedded in their products.

In the immediate term, companies concerned about VPPA exposure should verify whether their analytics tools—especially Leanplum, Mixpanel, or OpenWeb—transmit personal information in a form that an ordinary person could understand, or only in an unreadable format requiring special knowledge or technical expertise.

www.fkks.com

This alert provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More