Hoopla Digital faces VPPA probe over unauthorized user data sharing

This investigation signals that the wave of VPPA-related litigation is expanding beyond commercial streaming giants to include educational and public library vendors. For the industry, it highlights the high legal risk associated with standard web tracking technologies like the Meta Pixel when paired with video consumption data. If the probe leads to mass arbitration or a class action, Hoopla could face liabilities reaching into the millions, as the statute does not require plaintiffs to prove actual financial harm. Managers must now reconcile standard ad-tech monetization and analytics with strict, decades-old privacy mandates. Watch for whether Hoopla modifies its data-sharing disclosures or if library systems begin mandating stricter privacy audits for digital distributors.

The investigation into Hoopla Digital arrives as the streaming industry faces a surge in litigation tied to the Video Privacy Protection Act (VPPA). Since 2024, dozens of platforms have faced similar scrutiny over the use of tracking pixels that transmit viewing history to third-party ad networks. Per Top Class Actions in September 2025, several high-profile services reached multi-million dollar settlements to resolve these claims, including Viki ($8 million), fuboTV ($3.4 million), and Formula 1 ($5.5 million). These cases typically allege that the platforms failed to obtain the 'informed, written consent' required by federal law before sharing PII with entities like Meta or Google.

Recent judicial rulings have created a complex landscape for these privacy disputes. According to Miller Canfield in April 2026, federal courts are currently split on how to define a 'consumer' and what constitutes 'personally identifiable information' under the 1988 statute. While the Second Circuit has previously taken an expansive view, the Southern District of New York recently held in Berryman v. Reading International that automated data transmissions via the Meta Pixel might not always qualify as a knowing disclosure of identity.

To resolve these inconsistencies, the U.S. Supreme Court granted certiorari in January 2026 for Salazar v. Paramount Global. Per WilmerHale, this case will determine whether individuals who subscribe to non-video services—such as newsletters—qualify as 'consumers' under the VPPA if they also happen to watch video on the provider's site. The outcome of this Supreme Court decision, expected later this year, will likely dictate the viability of mass arbitration efforts like the one currently facing Hoopla and determine if the 'pixel-based' litigation trend continues to accelerate or hits a definitive legal ceiling.