Industry - Policy Change
Executive Summary
Florida Attorney General James Uthmeier and Roku reached a settlement in June 2026 resolving allegations that Roku collected and sold children's sensitive data - including viewing habits, voice recordings, and geolocation - without proper parental consent under Florida's Digital Bill of Rights. Under the agreement, which includes no fine or admission of wrongdoing, Roku will invest an estimated $25 million to enhance parental controls and deploy the changes nationwide within 12 months. The re...
What Happened
In June 2026, Florida Attorney General James Uthmeier and Roku reached a settlement resolving allegations that Roku collected and sold children's sensitive data - including viewing habits, voice recordings, and precise geolocation - without proper parental consent as required under Florida's Digital Bill of Rights. The original complaint, filed in October 2025, also alleged that Roku shared this data with data brokers like Kochava to build profiles and track physical movements. Under the agreement, which includes no admission of wrongdoing and no civil fine, Roku committed to invest an estimated $25 million in engineering resources to enhance parental controls and deploy these changes nationwide within 12 months.
Who Is Affected
Children who use Roku streaming devices and their families are the primary affected group, particularly those whose viewing habits, voice recordings, and location data were allegedly collected and shared without adequate parental consent. The settlement's nationwide implementation means parents and children across all U.S. states will receive enhanced parental control features, not just Florida residents. Data brokers and advertising partners who previously received this data may also be affected by changes to Roku's data-sharing practices.
Why It Matters
This settlement demonstrates that a single state attorney general can effectively impose nationwide product changes on technology companies, potentially shifting the compliance landscape beyond California as the default standard-setter for privacy regulation. The case highlights how connected devices in the home can collect and monetize children's behavioral data through seemingly passive activities like streaming television. The settlement structure - requiring a $25 million product investment rather than a traditional fine - may create a new template for state enforcement but could also expose companies to class action litigation based on the same underlying conduct.
What You Should Do
Parents using Roku devices should review and activate the enhanced parental controls once they become available over the next 12 months, specifically looking for options to limit data collection and sharing related to children's viewing activities. Check your Roku account settings now to opt out of data sharing and advertising tracking features, and review your device's voice recording settings to disable or limit voice data collection if you have concerns. If you believe your child's data was collected without your consent between the alleged violation period and now, document the types of content accessed and consider whether you may have grounds for further action once implementation details are finalized.
Summary generated from verified sources and reviewed before publication. How we summarize.