Legal & Privacy Brief - September 14, 2026

Today: TED Foundation settles a $350,000 VPPA class action over unauthorized sharing of subscriber viewing data. The NSA is restructuring into five mission centers, including dedicated cybersecurity and AI units, with full operational capability targeted for January 2027. New class actions target Liquid Death over labeling practices and Amazon over pregnancy discrimination.

Litigation Updates

$350,000 TED Foundation VPPA Class Action Settlement

TED Foundation agreed to a $350,000 settlement resolving claims it violated the Video Privacy Protection Act (18 U.S.C. Section 2710) by sharing subscriber viewing history without proper consent. Class members with TED accounts can claim either two months of free TED membership or a $5 cash payment. The VPPA, originally enacted in 1988, has become a frequent basis for class actions against streaming and video platforms that share viewing data with third-party analytics or advertising services.

• Compliance Action: Organizations operating video platforms or membership services with viewing/watch history should audit third-party data sharing practices for VPPA compliance. Verify that consent mechanisms for sharing viewing data meet the statute's opt-in requirements.
• Source: Top Class Actions

Liquid Death Class Action Over "0g Sugar" Labeling

A new class action alleges Liquid Death's sparkling energy drinks marketed as "0g Sugar" are sweetened with allulose, a sugar the company omits from its front label. The lawsuit claims the labeling misleads consumers about the actual sugar content of the product.

• Source: Top Class Actions

Amazon Pregnancy Discrimination Class Action

A class action accuses Amazon of discriminating against pregnant workers by denying pregnancy-related accommodations and retaliating against employees who take medically necessary breaks. The case implicates the Pregnant Workers Fairness Act (PWFA), which took effect in June 2023 and requires covered employers to provide reasonable accommodations for pregnancy-related conditions.

• Compliance Action: Employers should review accommodation policies against PWFA requirements. Ensure managers are trained on pregnancy accommodation obligations and that retaliation protections are clearly documented in employee handbooks.
• Source: Top Class Actions

Policy Changes

NSA Reorganization Creates Five Mission Centers, Including Cyber and AI

The NSA is undergoing its most significant restructuring in a decade, replacing existing directorates with five mission centers: China, cybersecurity, artificial intelligence, combat support, and global intelligence. Army Gen. Joshua Rudd, who leads both NSA and U.S. Cyber Command, initiated a 30-day implementation clock earlier this month, with full operational capability expected by January 2027. The reorganization aims to accelerate intelligence delivery to military customers. Key unresolved questions include the future of the Cybersecurity Collaboration Center and how the restructuring affects the NSA-Cyber Command relationship at Fort Meade. The Tailored Access Operations group is expected to fall under the global intelligence center.

• Compliance Action: Defense contractors and organizations in the DIB sector should monitor how the new cybersecurity mission center affects threat intelligence sharing programs and any changes to the Cybersecurity Collaboration Center's industry partnerships.
• Source: The Record

Compliance Takeaways

• Audit video data sharing practices. The TED Foundation VPPA settlement is another reminder that sharing viewing history with third parties without explicit opt-in consent creates class action exposure under 18 U.S.C. Section 2710.
• Review pregnancy accommodation policies. The Amazon class action underscores PWFA enforcement risk. Ensure your accommodation request process, manager training, and anti-retaliation policies are current.
• Track NSA cybersecurity mission center developments. Organizations participating in NSA/CISA threat sharing programs should watch for changes to points of contact and information sharing mechanisms as the January 2027 operational capability deadline approaches.
• Verify product labeling compliance. The Liquid Death lawsuit highlights FTC and state consumer protection exposure from front-of-package claims that omit material ingredient information. Review marketing claims against actual product composition.