[paranoidrobot]

> The Video Privacy Protection Act (VPPA) blocks businesses from sharing data with third parties on customers' video purchases and rentals. At a minimum, the VPPA requires written consent each time a business wants to share this sensitive video data—including the title, description, and, in most cases, the subject matter.

This might be a bit off-topic, but does this mean also that what Plex did when it started sending out "Here's what your friends watched this week" emails would also be a violation?

[IdiranVibe]

Plex isn't for purchases or rentals, it's for streaming users' privately owned content, so seems like it wouldn't come under this.