That's not true. Many companies have this as a policy to avoid defamation lawsuits from former employees receiving what they consider a bad reference, but that's not because there's a law forbidding it.