Recent federal appellate decisions have narrowed the scope of the Video Privacy Protection Act, with he Second Circuit limiting what counts as “personally identifiable information” and excluding complex data strings and social media identifiers from VPPA protection.