LG smart TV privacy practices under fire following EFF tracking report

The dispute highlights a growing tension between hardware monetization and consumer protection as smart TVs become central data hubs. For the streaming ecosystem, this scrutiny threatens the reliability of Automatic Content Recognition data, which currently powers high-value targeted advertising and measurement. If regulators mandate 'privacy by design' defaults, the volume of granular viewing data available to platforms like Samsung and LG could drop significantly. This shift would force a recalibration of ad-supported business models that rely on hardware-level tracking. Watch for the FTC to potentially issue new guidance or enforcement actions specifically targeting IoT data transparency in the coming months.

The Electronic Frontier Foundation's report on LG is part of a broader pattern of scrutiny targeting Automatic Content Recognition across the smart TV industry. In March 2025, Samsung settled a $1.5 million class-action lawsuit over its ACR-enabled smart TVs collecting viewing data without clear disclosure, with plaintiffs alleging the company's 2015 privacy policy change enabled tracking of all content displayed on screen, including HDMI inputs. Vizio faced similar legal pressure in 2017 when the FTC fined the company $2.2 million for collecting second-by-second viewing data from 11 million devices without informed consent, a case that established early precedent for ACR-specific enforcement. These cases collectively illustrate that LG's webOS tracking practices sit within a well-documented history of CTV hardware vendors monetizing viewing data through opaque consent mechanisms.

Regulatory bodies are now moving beyond case-by-case enforcement toward structural rules that could reshape how smart TV manufacturers handle viewer data. The FTC's 2024 staff report on streaming services identified ACR as a key data collection vector requiring clearer opt-in defaults and called for industry-wide transparency standards, noting that most major platforms bury tracking disclosures in lengthy terms of service. In Europe, the European Data Protection Board issued guidance in late 2025 clarifying that consent mechanisms for IoT devices must meet the same granularity thresholds as web cookies under GDPR, effectively requiring smart TV manufacturers to present separate consent prompts for ACR, advertising personalization, and content recommendation data. Samsung, which operates its own ACR platform called Samsung Ads across its Tizen-based TVs, has begun rolling out a redesigned consent flow in select markets that separates advertising data collection from general device analytics, though privacy researchers note the default settings still favor data collection.

Technical analysis of ACR implementations reveals the scale of data exposure that regulators are now targeting. Researchers at Princeton University's Center for Information Technology Policy published a 2025 study demonstrating that ACR fingerprints can uniquely identify individual households with 94% accuracy using only audio watermarking from broadcast content, raising questions about whether current opt-out mechanisms adequately protect users who may not realize their viewing habits are being matched against a central database. The study also found that even when users disable ACR at the TV level, some manufacturers continue collecting data through companion apps and network-level signals, a finding that aligns with the EFF's criticism of LG's webOS architecture. For the streaming advertising ecosystem, these technical realities mean that any regulatory mandate requiring true opt-in consent could reduce addressable CTV inventory by an estimated 30 to 40 percent, according to projections from the Interactive Advertising Bureau's 2026 CTV measurement framework.