Oct 29, 2025
LinkedIn Must Face Video Privacy Lawsuit Over Website Tracking, U.S. Judge Rules
LinkedIn faces a video privacy lawsuit after a U.S. judge ruled on alleged website tracking violations. GoTrust explains how this case highlights the growing importance of video data privacy.
A U.S. federal judge has ruled that LinkedIn must face a class-action lawsuit alleging violations of the Video Privacy Protection Act (VPPA) over its handling of user data on LinkedIn Learning. The decision, issued by Judge P. Casey Pitts of the Northern District of California, allows the case to proceed, rejecting LinkedIn’s motion to dismiss.
The lawsuit was filed in February 2025 by Courtney Cole, a LinkedIn Premium subscriber, who claims the company shared her video-viewing history and personally identifiable information with Meta Platforms via tracking pixels embedded in LinkedIn Learning. Cole alleges that while logged into Facebook, LinkedIn disclosed her Facebook ID and the specific course she watched without her consent.
Judge Pitts found that if the allegations are proven true, they could support a finding that LinkedIn violated the VPPA, a federal law originally enacted in 1988 to protect consumers from unauthorised disclosure of video rental records. The law has since been applied to digital platforms that stream or host video content.
The complaint also claims that LinkedIn integrated user data with Adobe Analytics, further expanding the scope of third-party sharing. Cole argues that LinkedIn failed to provide clear notice or obtain informed consent before transmitting sensitive viewing data, especially while users were simultaneously logged into other platforms.
LinkedIn has denied wrongdoing and maintains that its data practices are compliant with privacy laws. The company argued that the VPPA does not apply to its platform and that the data shared was not sufficiently specific to constitute a violation. However, the court disagreed, stating that the combination of Facebook ID and specific video titles could qualify as personally identifiable information under the statute
📰 Mini Headlines
Australia Labels Instagram, Google, TikTok, Snapchat, X as 'Age-Restricted' Platforms
Australia’s eSafety Commissioner has officially designated Instagram, Google Search, TikTok, Snapchat, and X (formerly Twitter) as “age-restricted” services under its Online Safety Act. The classification requires these platforms to implement stricter age verification and safety measures for users under 18. The decision follows concerns over exposure to harmful content, data tracking, and online grooming risks. Platforms must now demonstrate compliance or face regulatory action.
Online Safety Act
Read More → https://www.mondaq.com/data-protection/1687008/adgms-new-data-protection-rules-balancing-privacy-and-public-interesthttps://www.mlex.com/mlex/data-privacy-security/articles/2401738
UK Government to Centralise Data Protection After Afghan Resettlement Leak
The UK government will implement centralised data protection protocols following a serious breach involving Afghan nationals. In 2021, the Ministry of Defence mistakenly exposed personal details, including names, email addresses, and profile photos, of over 250 Afghan interpreters eligible for relocation under the Afghan resettlement scheme. The incident drew widespread criticism and led to internal investigations. In response, the Cabinet Office now plans to standardise data handling across departments, improve breach reporting, and strengthen oversight to prevent similar lapses in sensitive humanitarian programs.
Data Breach
US Tech Giants Stall India Data Centre Investments Amid Regulatory Uncertainty
Major U.S. tech firms, including Amazon Web Services, Google, and Microsoft, have reportedly paused plans to expand data centre operations in India. The delay stems from regulatory ambiguity surrounding India’s Digital Personal Data Protection Act, 2023, and concerns over cross-border data transfer restrictions. Industry sources cite the need for clearer compliance guidelines and operational rules before committing to infrastructure investments. The move could impact India’s ambitions to become a global data hub and signals growing tension between innovation and regulation in the digital economy. Government officials are expected to engage with stakeholders to resolve concerns.
Digital Personal Data Protection Act, 2023
Read More → https://www.varindia.com/news/us-tech-giants-pause-india-data-centre-deals
Next Newsletter
Microsoft Violated EU Privacy Law in Handling Children’s Data, Austrian Regulator Finds
Microsoft has been found violating the EU Privacy Law by mishandling children’s data, according to an Austrian regulator. Discover how this decision impacts Microsoft’s data protection practices and the broader implications for compliance under the EU Privacy Law.
India Finalizes Digital Personal Data Protection Rules, Awaits Legal Clearance
India has finalized the Digital Personal Data Protection (DPDP) Rules, moving closer to enforcing a robust data privacy framework. Discover what these new rules mean for compliance, businesses, and data protection in India.
