Never heard of such a law. Unless the retailer's privacy policy explicitly says otherwise, your purchase records, which would include receipts, belong to them and they can sell them to a data company, for example, or whatever they want. In some cases, you may have the right to "opt out" of such sharing.