An ongoing challenge in identifying potential exposures in data privacy and security created by a company's operations is having to account for creative ways in which new technology is wedged into seemingly unrelated statutes. An example of these exposures is the recent rash of class action lawsuits filed in Pennsylvania and nationwide under the Video Privacy Protection Act (VPPA), 18 U.S.C. Section 2710.