UK regulator targets connected TV privacy as 70% of households adopt smart sets
The UK Information Commissioner's Office (ICO) has published its finalized guidance for consumer Internet of Things (IoT) products, emphasizing privacy by design and transparent data use. The ICO will specifically engage with connected TV manufacturers to assess compliance regarding data collection and targeted advertising practices. This initiative aims to ensure consumers have meaningful control over their data in smart devices.
Key Takeaways
- Smart TV manufacturers must implement clear, specific opt-in consent flows for all targeted advertising data collection.
- Hardware and software design must prioritize privacy by default, including the limitation of data collection to strictly necessary functions.
- The ICO will conduct direct engagement with connected TV vendors this year to assess compliance with UK data protection law.
- Manufacturers are now required to perform Data Protection Impact Assessments (DPIAs) due to the sensitivity of viewing habit and routine data.
- Security obligations are redefined as a lifetime requirement involving mandatory encryption, regular updates, and multi-factor authentication.
Why It Matters
This move signals a shift from broad IoT oversight to specific scrutiny of for-profit data collection within the living room. For the streaming ecosystem, this creates immediate friction for hardware-level Automatic Content Recognition (ACR) and first-party data monetization strategies that rely on passive background tracking. As smart TVs become the primary gateway for both premium video and programmatic advertising, manufacturers must move away from 'bolted-on' privacy notices toward granular user controls. Watch for the ICO's first assessment results later this year, which may dictate a standardized UK consent interface for all streaming hardware vendors.
Additional Context
The ICO’s focus on connected TVs aligns with a broader legislative overhaul under the UK Data (Use and Access) Act 2025. Per WSGR in February 2026, this Act introduced tougher penalties for non-compliance with tracking regulations, enabling the ICO to impose fines of up to £17.5 million or 4% of global turnover. Concurrently, the regulator has demonstrated a decreased tolerance for inadequate safeguards around minor audiences; in early 2026, the ICO fined Reddit £14.47 million and MediaLab/Imgur nearly £250,000 for failing to prevent unlawful processing of children’s data. This enforcement trend directly impacts smart TV vendors, as high-surveillance features like voice recognition and viewing history often capture data from household members under the age of 13. Simultaneously, the industry faces shifting rules on tracking technologies. Per Womble Bond Dickinson in May 2026, the ICO recently provided advice to the UK government suggesting that while technical processes like audience measurement and frequency capping might eventually operate without explicit consent under a 'low-risk' framework, high-level behavioral profiling will remain strictly opt-in. This regulatory posture is emerging as smart TVs solidify their market position. According to Ofcom’s Media Nations 2025 report, YouTube viewing on TV sets alone jumped from 34% to 41% of its total reach in a single year, highlighting the massive scale of the data ecosystem the ICO is now seeking to regulate. Retailers and manufacturers must also navigate new prominence and accessibility mandates introduced by the UK Media Act, which designates major streaming players for stricter oversight starting in mid-2026.
Read full article at ico.org.uk
Get this in your inbox → Subscribe
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source