The Video Privacy Protection Act (VPPA) of 1988 generally prohibits the disclosure of a consumer's video rental or purchase records to third parties.
The law contains some exceptions for marketing and law enforcement purposes.