Regulators and privacy firms target persistent smart TV viewing surveillance
Privacy researchers from Proton are highlighting the widespread use of Automatic Content Recognition (ACR) at the chipset level in smart TVs to track consumer viewing habits. This practice is drawing increased regulatory attention, including investigations by the UK's Information Commissioner’s Office and new consent-based legislation in Kentucky.
Key Takeaways
- ACR operates at the chipset level, tracking everything from live broadcasts to gaming consoles regardless of app usage.
- A 2024 ACM study confirms ACR persists even when smart TVs are used as passive external displays.
- UK's ICO and Kentucky's Governor have launched measures requiring explicit manufacturer-level consumer consent for data harvesting.
- Switzerland-based Proton suggests hardware-side blocks, including DNS sinkholes or permanent offline operation, to stop telemetry.
Why It Matters
The shift from software-based app tracking to hardware-rooted ACR represents a critical friction point for the ad-supported streaming model. As manufacturers move toward integrated advertising stacks to offset declining hardware margins, regulatory interventions in jurisdictions like the UK and Kentucky set precedents for mandatory opt-in consent. This could significantly degrade the granularity of audience measurement data available to advertisers who currently rely on default telemetry. Watch for the implementation of Kentucky’s HB-692 in July 2027 to see if manufacturers shift to 'privacy-first' hardware models or dual-screen subsidized designs.
Additional Context
The regulatory landscape for smart TV data tightened significantly in late 2025 and early 2026. Per Law.com and Malwarebytes, Texas Attorney General Ken Paxton filed lawsuits in December 2025 against five major manufacturers—Samsung, Sony, LG, TCL, and Hisense—alleging they unlawfully collected viewing data via ACR without transparent consent. By March 2026, Samsung settled with the Texas AG, agreeing to stop collecting ACR data from residents without explicit opt-in and to redesign its on-screen privacy prompts. Hisense also faced a temporary restraining order in January 2026, which halted ACR data collection in the state while legal proceedings continued, according to reporting from Alston & Bird. This litigation highlights the specific focus on 'watchware,' a term regulators are increasingly using to describe hardware-embedded tracking. Parallel to these legal challenges, the 'free TV' market is testing the limits of consumer data tolerance. Startup Telly, which provides free 55-inch dual-screen sets in exchange for constant data tracking and ad exposure, remains a focal point for the 'TV-as-a-service' model. Despite early projections of 500,000 units, reports from Lowpass and TechRadar in January 2026 indicated Telly had roughly 35,000 sets in the field as of late 2025. However, those units reportedly generated over $50 in monthly ad revenue per device—surpassing the quarterly ARPU of established platforms like Roku. This highlights the high commercial value of the very data that regulators now target. Meanwhile, research by Reviews.org in June 2026 found that 78% of consumers would disconnect devices if they learned tracking exceeded expectations, signaling a potential market opening for the business-oriented panels or 'dumb' displays recommended by privacy advocates.
Read full article at cybernews.com
Get this in your inbox → Subscribe
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source