Games and streaming services combine young audiences with detailed behavioral tracking, drawing both COPPA enforcement and VPPA litigation. This hub covers both.
State Comprehensive Privacy Laws
October 26, 2026
Nebraska's design code, LB 504, was approved May 30, 2025 and became operative January 1, 2026. LB 838 rewrote its coverage test, more than doubled its list of engagement features and added two sections, effective July 18, 2026. Penalties of up to $50,000 became available July 1, 2026, and the Attorney General first pleaded the Act in October 2026.
Read more →
AI & Privacy
October 19, 2026
Tennessee's Ensuring Likeness, Voice, and Image Security Act, enacted as Public Chapter 588 and effective July 1, 2024, renamed the state's 1984 publicity statute, added a voice right that covers simulations, and created civil liability for public distribution of unauthorized voices or likenesses and for tools whose primary purpose is producing a particular person's voice or likeness.
Read more →
COPPA
October 12, 2026
Utah's SB 142 of 2025 made app stores, not individual apps, the point where a user's age is checked and a parent's consent is collected. HB 498 of 2026 rewrote it before any duty applied: obligations now begin May 6, 2027, government enforcement is gone, and a harmed minor or parent may sue for the greater of actual damages or $1,000 per violation.
Read more →
State Comprehensive Privacy Laws
October 5, 2026
Virginia has amended its Consumer Data Protection Act twice for minors. Chapters 840 and 844 of 2024 restricted processing of a known child's data and required parental consent under COPPA from January 1, 2025. Chapter 703 of 2025 capped social media use by users under 16 at one hour a day, a rule a federal court preliminarily enjoined as to NetChoice members in February 2026.
Read more →
VPPA
September 7, 2026
One phrase in the Video Privacy Protection Act ("goods or services from a video tape service provider") has produced an open split among three courts of appeals over who may sue. The Supreme Court granted review on 26 January 2026 and has set argument for 14 October 2026. This post sets out what each opinion actually reasoned.
Read more →
COPPA
September 1, 2026
The FTC published amendments to the Children's Online Privacy Protection Rule on April 22, 2025. They added a separate-consent requirement for third-party disclosure, a written retention policy and a prohibition on indefinite retention, two new categories of personal information, a written security program, and staggered obligations for safe harbor programs.
Read more →
VPPA
August 24, 2026
The VPPA is short, oddly drafted, and enforced entirely by private plaintiffs rather than by any agency. This guide walks the statute section by section: the four definitions that set its perimeter, the six disclosures it permits, the consent form Congress rewrote in 2013, the records-destruction duty a court of appeals has held is not privately enforceable, and the damages that drive the docket.
Read more →
COPPA
August 12, 2026
COPPA turns on two questions that decide everything downstream: whether a service is directed to children under 13, and whether the operator has actual knowledge it is collecting from one. This guide covers the multi-factor test, what counts as personal information, the approved consent methods, and the state laws now layered on top.
Read more →
VPPA
August 12, 2026
The Video Privacy Protection Act was passed in 1988 after a newspaper published a Supreme Court nominee's video rental history. It now generates a steady stream of claims against websites that embed video and third-party tracking pixels. Two questions divide the courts: who counts as a subscriber, and what qualifies as personally identifiable information.
Read more →