A 1988 federal law could bar tech companies from using video viewing data for targeted ads without explicit user consent.