Blockbuster-era law governing privacy of video rentals gets a fresh look from the Supreme Court

The Supreme Court is set to revisit a 1988 privacy law that once shielded the records of video‑store customers. The decision comes at a time when the way people consume entertainment has shifted dramatically from physical copies to digital downloads and streaming services. Yet the statute, originally written for the aisles of Blockbuster and its rivals, still sits on the books, and its relevance is now under scrutiny.The law, known formally as the Video Privacy Protection Act (VPPA), was enacted after a series of high‑profile incidents that raised public concern about the confidentiality of movie‑rental histories..

In the early days of home video, people could walk into a storefront, choose a title, and leave their personal details—name, address, and payment information—behind. A handful of unscrupulous vendors had been discovered to be sharing that data with third parties, sparking fears that a private entertainment preference could become public.When Congress passed the VPPA, it aimed to prevent exactly that. The Act made it illegal for a video‑store operator to disclose a customer’s rental records without consent..

The law also introduced penalties for violations, creating a deterrent for businesses that might otherwise use a customer’s movie‑shopping history for targeted marketing or other purposes without permission. In practice, it had a quiet but meaningful impact on the industry, encouraging stores to adopt internal safeguards and giving consumers a legal recourse if their privacy was breached.Fast forward to the present day, and the video‑store landscape has largely disappeared. Blockbuster’s flagship stores closed in the early 2010s, and the market shifted to online streaming platforms that rely on sophisticated algorithms to recommend titles..

Its provisions are still invoked in cases involving the handling of user data by streaming services, subscription boxes, and even the small number of independent video‑stores that have managed to keep a brick‑and‑mortar presence.The Supreme Court’s docket, however, has been full of privacy‑related cases in recent years, from the question of whether the government can compel a smartphone company to reveal user data to the debate over facial‑recognition technology and its impact on the Fourth Amendment. In this context, the Court’s decision to hear a case involving the VPPA signals an intent to examine how 1980s legislation applies to 21st‑century digital practices.The case on hand involves a small independent video‑store chain that was sued by a customer for allegedly sharing her rental records with a third‑party marketing firm without consent. The store argued that it had complied with a court order to provide data that was not protected under the VPPA, and that the law had been superseded by later privacy regulations..

The plaintiff, a resident of Oregon, countered that the VPPA still applied because it was still in force and the data in question were indeed rental records. The dispute raised complex questions about the scope of the Act and whether its provisions could be overridden by other statutory frameworks such as the Gramm‑Leach‑Bliley Act or more recent consumer‑privacy legislation.Legal scholars point out that the Supreme Court has not yet defined the boundaries of the VPPA’s modern applicability. The statute’s text is narrow: it protects the “personal privacy of a customer with regard to their rental transactions.” But what constitutes a “rental transaction” in an era when people can stream a movie for a subscription fee or purchase a digital copy for a one‑time download?.

Is a subscription to a streaming service comparable to renting a physical VHS tape? Does the law cover the use of viewing histories for recommendation engines? These are the questions the Court will need to answer.The Court’s decision to take up the case follows a wave of litigation that has tested the limits of privacy statutes in the digital age..

In 2023, for example, a Ninth Circuit ruling clarified that the Federal Trade Commission’s authority to enforce the Children’s Online Privacy Protection Act (COPPA) extended to apps that collected data from children under 13. That case, and others like it, highlighted the difficulty of applying century‑old legal principles to technologies that were unimaginable when the laws were drafted.The VPPA’s origin story is also noteworthy. When the Act was drafted, it was one of the first federal privacy laws to address the collection of personal data by private companies..

The legislation was championed by a coalition of consumer advocates and privacy experts who feared that the nascent home‑video market would become a breeding ground for exploitation. The Act set a precedent that personal data was not a commodity to be traded freely without consent, a principle that has influenced later privacy laws, including the California Consumer Privacy Act (CCPA) and the European Union’s General Data Protection Regulation (GDPR).The Supreme Court’s involvement may have implications beyond the immediate case. If the Court interprets the VPPA narrowly, it could leave a gap in consumer privacy protection for streaming services that do not fall under other statutes..

Conversely, a broad interpretation could require a range of digital platforms to re‑evaluate their data‑handling practices, potentially leading to new compliance costs and operational changes.Critics argue that the law is already outdated, citing that it was written for a market that no longer exists. They point out that the statute’s language is so specific that it might be ill‑suited for the opaque data ecosystems of streaming services, where a customer’s entire viewing history is often used to shape a personalised recommendation engine. They also note that other privacy laws, such as the Digital Millennium Copyright Act, have already imposed limits on how personal data can be used in the context of copyrighted works, thereby overlapping with the VPPA.Supporters of a strong VPPA stance contend that the Act offers a necessary legal safeguard that has remained largely untouched by more recent legislation..

They point to the fact that the VPPA is one of the few statutes that explicitly criminalises the disclosure of rental records, providing a clear deterrent against data leaks. They also argue that the Act’s narrow focus on rental transactions means that it is less likely to clash with other privacy frameworks, making it a clean tool for protecting consumer data.The Court’s ruling will likely take the form of a legal opinion that either affirms or modifies the existing understanding of the VPPA’s scope. The decision will be announced sometime in the second quarter of 2025, following the Court’s schedule of early spring cases..

The case has attracted a lot of attention from privacy advocates, technology companies, and the legal community, all keen to see how the Supreme Court will balance the interests of consumer privacy against the rapidly evolving landscape of digital media consumption.In the meantime, the video‑store chain in question has voluntarily suspended the distribution of customer data pending the outcome of the case, a move that.