Multiple smart-TV manufacturers have recorded second-by-second viewing data from millions of households and shared those records with third parties, all without meaningful user consent. Federal and state regulators have responded with enforcement actions and consent agreements targeting VIZIO, Samsung, and LG, collectively establishing that the practice is an industry pattern rather than a one-off violation. The trail of settlements and agreements now raises a pointed question: whether the same tracking technology will simply migrate to devices that regulators have not yet targeted.
Why state enforcement against TV data collection matters right now
The core technology at issue is automatic content recognition, or ACR. It works by sampling pixels or audio from whatever appears on a television screen, matching those samples against a reference library, and transmitting a log of what was watched, when, and for how long. That log becomes a product. It can be paired with demographic data and sold to advertisers, analytics firms, or other buyers who want granular insight into household media habits.
Texas Attorney General Ken Paxton has secured an agreement with Samsung requiring the company to halt ACR viewing data collection in Texas without express consent. Under the same agreement, Samsung must push software updates that deliver clearer disclosures and consent screens to its television sets. Paxton’s office also reached a separate agreement with LG to stop data collection without user knowledge and to require consumer consent for ACR activity. These state-level actions apply only within Texas, leaving the same devices in other states free to continue collecting data under whatever terms the manufacturer sets in its default settings.
The practical tension is straightforward. Each consent decree or agreement binds a single manufacturer in a single jurisdiction. ACR technology, however, is not limited to traditional television hardware. Streaming sticks, set-top boxes, and gaming consoles with media apps can perform the same pixel-matching and audio-fingerprinting functions. None of the Texas agreements or the earlier federal action against VIZIO explicitly cover those categories. If enforcement pressure makes ACR collection riskier on branded television sets, manufacturers and their data partners have a clear incentive to shift collection to adjacent devices that sit outside current enforcement priorities.
For consumers, the jurisdiction-by-jurisdiction approach also means that privacy protections can vary dramatically depending on where a television is plugged in. A Samsung set sold in Dallas may display a prominent consent prompt and keep ACR disabled by default unless the viewer opts in. The same model in neighboring states may enable tracking during setup, relying on buried terms of service to claim that the user has agreed. This patchwork makes it difficult for viewers to understand what is happening with their data, and it complicates any broader effort to restore trust in connected devices.
Federal and state enforcement records on ACR data sales
The most detailed public record of how this data pipeline works comes from the federal case against VIZIO. The FTC and the State of New Jersey alleged that VIZIO collected viewing histories on 11 million smart televisions without users’ consent. According to the FTC, VIZIO captured second-by-second viewing data and sold or shared it with third parties. The company agreed to pay $2.2 million to settle the charges. That dollar figure, spread across 11 million affected sets, amounts to roughly twenty cents per television, a sum that did little to offset the commercial value of years of granular audience data.
The FTC complaint described a system that began logging viewing behavior as soon as a VIZIO set connected to the internet. Users were not presented with a clear opt-in prompt. The data was paired with household-level information, including IP addresses and nearby Wi-Fi access points, before being transmitted to VIZIO’s data subsidiary and then to outside buyers. The settlement required VIZIO to delete previously collected data and to obtain affirmative consent before resuming any collection. It also mandated a privacy program, but the order did not prohibit ACR outright; it sought instead to regulate how the technology could be used.
Texas enforcement actions followed a similar pattern but targeted different manufacturers. Attorney General Paxton issued a consumer alert warning Texans about smart TVs collecting data covertly, and his office filed lawsuits alleging ACR-based data collection without consent. The Samsung and LG agreements that followed required each company to redesign its consent flow for Texas consumers and to stop processing ACR data absent clear permission. In both cases, the state framed ACR tracking as a deceptive and intrusive business practice, not as an unavoidable feature of modern televisions.
Taken together, these actions name three of the largest television brands in the United States. The enforcement record makes clear that ACR data collection was not a rogue feature buried in one company’s firmware. It was a revenue strategy adopted across the industry, built into default settings, and disclosed, if at all, in dense privacy policies that few consumers read. The settlements also illustrate regulators’ preferred tools: civil penalties, injunctive relief, and forward-looking requirements to obtain express consent before harvesting viewing data.
Gaps in the enforcement record and what viewers should watch for
Several significant questions remain open. No public compliance audit has confirmed whether VIZIO fully ceased selling viewing data after its 2017 settlement. The FTC case page links to the stipulated order and original complaint, but no follow-up report measures ongoing compliance. The Texas agreements with Samsung and LG similarly lack a public verification mechanism. The Texas Comptroller’s transparency portal contains no published filings or audit reports on either company’s post-agreement conduct.
The absence of compliance data matters because the financial incentive to collect and sell viewing records has only grown since 2017. Programmatic advertising budgets have expanded, and advertisers increasingly seek cross-device profiles that tie television habits to phones, tablets, and laptops in the same household. ACR logs are uniquely valuable in that ecosystem: they reveal not just which streaming service a viewer used, but which specific program or ad appeared on screen at a given moment.
Regulators have also left entire device categories largely unaddressed. A streaming stick plugged into an older, non-smart television can still run ACR inside its apps or operating system. A game console that doubles as a media hub can do the same. Even when those devices do not use classic pixel-matching, they can track which apps are opened and which streams are played, producing a functionally similar record of viewing behavior. None of the existing settlements clearly extend to those scenarios, and there is no public indication that federal or state agencies are auditing them at comparable depth.
For viewers, the practical takeaway is to assume that any internet-connected screen may be collecting detailed usage data unless proven otherwise. On a smart TV, that means digging into settings menus for options labeled “viewing information,” “smart interactivity,” or “interest-based advertising” and turning them off. On streaming boxes and consoles, it means reviewing privacy sections for controls that limit ad tracking or disable personalized recommendations based on watch history. These steps do not guarantee that all data collection will stop, but they can reduce the volume and specificity of what is shared.
The enforcement record also underscores the importance of clear, on-screen consent prompts. When a device first connects to the internet or after a major software update, viewers should watch for any request to enable “content recognition” or similar features and consider declining. If the choice is presented in a way that nudges users toward agreement-such as pre-checked boxes or language that suggests features will break if tracking is disabled-that design itself may signal a company’s priorities more than its respect for privacy.
Looking ahead, the unresolved gaps create a policy dilemma. Regulators can continue to negotiate company-by-company settlements, gradually expanding the list of manufacturers subject to consent requirements. Or they can pursue broader rules that apply across device types and brands, setting baseline standards for how and when viewing data may be collected. Until that happens, enforcement will likely remain reactive, chasing the last generation of hardware while new platforms quietly inherit the same tracking capabilities.
In the meantime, the pattern is clear. When ACR tracking is exposed and challenged, companies rarely defend the practice in detail; instead, they agree to tweak disclosures, add consent screens, and pay fines that are small relative to their advertising revenue. That cycle may deter the most aggressive forms of covert surveillance, but it does not resolve the underlying conflict between business models built on behavioral data and viewers’ expectation that watching television is a private act. Without stronger, more comprehensive safeguards, the same technology that once hid in smart TVs is likely to keep reappearing wherever people press play.
More from Morning Overview
*This article was researched with the help of AI, with human editors creating the final content.
