A federal appellate court ruled Thursday that self-service movie kiosk company Redbox did not violate the Video Privacy Protection Act by giving an outside customer-service vendor access to its customer database.

The U.S. Court of Appeals for the Seventh Circuit affirmed Northern District of Illinois Judge Matthew Kennelly’s August 2013 summary judgment for the company.