US Supreme Court Weighs Expansion of Digital Video Privacy Protections
The Supreme Court is considering whether a 1988 video rental privacy law applies to modern websites that share user viewing data with Facebook. The ruling could expose digital publishers to significant liability if they use tracking pixels without explicit consent.
Share this story
The US Supreme Court heard oral arguments on October 14 to determine whether a 1988 privacy law written for video rental stores applies to modern websites that share user data with Facebook. The case, Salazar v. Paramount Global, tests whether a free newsletter subscriber qualifies as a protected consumer.[1][2]
If the Court rules in favor of the plaintiff, the decision could upend how digital publishers and retailers use standard analytics tools. The justices are weighing whether the Video Privacy Protection Act restricts the use of tracking pixels that transmit viewing habits to advertisers without explicit consent.[1][4]
The litigation began in September 2022 when Michael Salazar filed a class-action lawsuit against Paramount Global. Salazar had signed up for a free email newsletter from 247Sports, a college sports recruiting website owned by the media conglomerate.[1][4]
The origin of the dispute
Salazar alleged that while he was logged into his Facebook account, he watched publicly available videos on the 247Sports website. He claimed that Paramount had embedded a Meta tracking pixel on the site, which automatically sent the video URLs and his Facebook ID back to the social network.[1][4]
Because the data transfer occurred without his knowledge or consent, Salazar argued that Paramount violated federal privacy protections. He sought statutory damages, which under the VPPA are set at $2,500 per violation, a figure that could quickly reach billions in a class-action scenario.[1][5]
The Meta Pixel is a ubiquitous piece of code that website operators embed in their pages to track visitor behavior and measure advertising effectiveness. When a user interacts with a site, the pixel logs the activity and matches it against Meta's vast database of logged-in users.[1][2]
In the context of video content, the pixel can record exactly which clip a user clicked and link that specific media consumption directly to their real identity. Privacy advocates argue this invisible data exchange is functionally identical to a video clerk handing a customer's rental history to a third-party marketer.[2][5]
The circuit split
Congress passed the VPPA in 1988 following a high-profile privacy scandal during the Supreme Court nomination of Judge Robert Bork. A journalist had convinced a video store clerk to hand over Bork's rental history, prompting lawmakers to swiftly criminalize the unauthorized disclosure of video consumption records.[2][5]
The statute prohibits any video tape service provider from knowingly sharing personally identifiable information about a consumer. The law was updated in 2012 to accommodate digital streaming services like Netflix, allowing companies to obtain electronic consent, but the core definition of a protected consumer remained unchanged.[4][5]
The Supreme Court agreed to hear the case in early 2026 to resolve a deepening divide among federal appellate courts. The core legal dispute hinges on three words in the VPPA, which defines a consumer as any renter, purchaser, or subscriber of goods or services.[4][5]
In April 2025, the Sixth Circuit Court of Appeals dismissed Salazar's lawsuit, ruling that the phrase requires a user to subscribe specifically to audiovisual goods. Because Salazar only signed up for a text-based newsletter, the appellate panel concluded he did not meet the statutory definition of a consumer.[1][4]
Oral arguments and judicial skepticism
Other appellate courts have adopted a much broader reading of the decades-old text. The Second and Seventh Circuits have previously ruled that subscribing to any good or service from a company that also provides video content is sufficient to trigger the law's strict privacy protections.[3][4]
During the October 14 hearing, several justices appeared skeptical of Paramount's attempt to narrow the statute's scope. Justice Elena Kagan pointed out that the law explicitly says "goods or services" without adding the word "audiovisual," suggesting that the plaintiff's broad interpretation aligns with a natural reading of the text.[1][3]
Kagan also dismissed the media industry's concerns about the operational burden of compliance. She noted that websites have two simple choices: they can either implement mechanisms to obtain explicit user consent, or they can "stop selling people's private information" to third-party advertisers.[1]
Paramount's attorney, Paul Clement, warned the justices that ruling for Salazar would transform a narrow video rental law into a sweeping internet privacy regime. He argued that Congress never intended the VPPA to govern free web content, and that a broad ruling would trigger a massive wave of opportunistic litigation.[1][2]
Industry fallout and future impact
Justice Brett Kavanaugh echoed some of the industry's concerns, questioning whether it was appropriate to repurpose a 1988 video law to regulate modern web advertising. He suggested that a ruling against Paramount would inevitably lead to websites placing all video content behind aggressive, over-broad consent pop-ups.[1]
A decision is expected by the summer of 2027, and the stakes extend far beyond traditional media companies. "The Supreme Court's decision in Salazar v. Paramount Global will affect the privacy rights of millions of people across the country," Salazar's lawyer, Joshua I. Hammack, told CNET.[2]
Retailers, sports leagues, and independent publishers that host incidental video clips alongside standard tracking tools are closely watching the outcome, fearing massive financial exposure. If the Supreme Court sides with Salazar, the internet's frictionless video experience could fundamentally change.[1][2]
Key points
- The Supreme Court is reviewing whether the 1988 Video Privacy Protection Act applies to modern websites that use tracking pixels to share viewing data.
- The case centers on whether a user who subscribes to a free text newsletter qualifies as a protected "consumer" under the decades-old video law.
- During oral arguments, several justices appeared skeptical of Paramount's claim that the law only protects users who explicitly subscribe to audiovisual services.
- A broad ruling could expose digital publishers and retailers to massive class-action liability, potentially forcing all web video behind strict consent gates.
What we don’t know
- It remains unclear exactly where the Supreme Court might draw the line if they reject Paramount's narrow interpretation without fully endorsing the plaintiff's broad view.
- It is unknown how Meta and other advertising technology providers might alter their tracking pixels to shield publishing partners if the Court expands VPPA liability.
How we got here
1988
Congress passes the Video Privacy Protection Act following the unauthorized disclosure of Supreme Court nominee Robert Bork's video rental history.
2012
The VPPA is amended to allow digital streaming services to obtain electronic consent for sharing viewing data.
September 2022
Michael Salazar files a class-action lawsuit alleging Paramount's 247Sports website illegally shared his viewing history with Facebook.
April 2025
The Sixth Circuit Court of Appeals dismisses the lawsuit, ruling that a newsletter subscriber is not a protected consumer under the VPPA.
October 2026
The Supreme Court hears oral arguments to resolve a circuit split over the definition of a consumer.
- Digital Privacy Advocates
- Argue that invisible data tracking violates the core intent of the VPPA.
- Media and Retail Publishers
- Warn that applying the VPPA to web analytics will break the free internet.
Perspectives this story doesn't cover
- Small independent web publishers who rely on standard analytics tools but lack the legal resources of major media conglomerates.
Sources
[1]The Next WebMedia and Retail PublishersA newsletter subscriber says Paramount's 247Sports shared his video viewing with Facebook. Justices seemed sympathetic.
Read on The Next Web →
[2]CNETDigital Privacy AdvocatesSupreme Court Weighs Major Video Privacy Case
Read on CNET →
[3]Reuters WestlawMedia and Retail PublishersSCOTUS probes scope of 'consumer' in video privacy law
Read on Reuters Westlaw →
[4]BallotpediaMedia and Retail PublishersSalazar v. Paramount Global
Read on Ballotpedia →
[5]Electronic Privacy Information CenterDigital Privacy AdvocatesSalazar v. Paramount Global
Read on Electronic Privacy Information Center →
More in Technology
See all →Cryptographic Protocols
Double Ratchet Uses Ephemeral Diffie-Hellman Keys to Restore Post-Compromise Security
4 sources
Wearable Surveillance
EU Privacy Board Demands Prominent Recording Alerts on Smart Glasses to Prevent Covert Surveillance
7 sources
Wi-Fi Tracking
How Wi-Fi Probe Requests Leak Information Elements That Bypass MAC Randomization
5 sources
Web Encryption
Cleartext Server Name Indication Leaks Visited Domains Over HTTPS: How Encrypted Client Hello Wraps the TLS Handshake in Decoy Metadata
6 sources
Comments
Every angle. Every day.
Get Technology stories with full source coverage and perspective breakdowns, free every day.




