Florida Attorney General James Uthmeier has filed a civil enforcement action against Roku, Inc. and its Florida subsidiary, accusing the streaming platform of violating the Florida Digital Bill of Rights (FDBOR) and the Florida Deceptive and Unfair Trade Practices Act (FDUTPA). The complaint marks a major move by Florida’s newly established Office of Parental Rights to strengthen parental control over children’s personal data in the digital age.
In a statement announcing the lawsuit, Attorney General Uthmeier said, “Florida families deserve to know what is happening with their children’s personal information. Parents — not technology companies — direct the upbringing of their children. We will hold any company that conceals or exploits that information accountable.”
Allegations Against Roku
According to the complaint, Roku unlawfully collected and sold sensitive data from Florida users — including children’s viewing habits, voice recordings, and precise geolocation information — without obtaining parental consent or providing meaningful notice. The state alleges that Roku shared this information with data brokers and advertisers, including the firm Kochava, which is already facing a lawsuit from the Federal Trade Commission for its own data sales practices.
The lawsuit claims that Roku’s data collection practices made it possible to reidentify individual users, even when data was labeled as anonymized. Florida prosecutors argue that by combining viewing data, voice interactions, and geolocation records, Roku effectively allowed individuals — including children — to be traced and profiled.
Roku’s privacy tools are also under scrutiny. The complaint accuses the company of misrepresenting the effectiveness of its privacy controls and opt-out features, leading families to believe their data was protected when it was not.
Violations of Florida’s Digital Privacy Laws
The Florida Digital Bill of Rights, enacted to give residents greater control over their personal information, requires clear consent before companies collect or sell sensitive data from minors. It also mandates transparent disclosures about how companies gather, store, and share personal information.
Florida alleges that Roku’s practices directly violate these obligations. Even when users sign up for children’s programming — effectively signaling to Roku that they are minors — the company allegedly continues to collect and process their data. The complaint highlights that four of Roku’s five most-searched programs in 2024 were children’s shows, indicating widespread exposure of young viewers to data tracking and advertising.
Broader Implications and Enforcement Goals
Through the lawsuit, Florida seeks civil penalties, injunctive relief, and measures requiring Roku to improve transparency, strengthen parental-control systems, and stop any unauthorized sale or processing of children’s data.
The Attorney General’s office said the action is part of a larger initiative to “empower parents, protect children, and bring accountability to the digital marketplace.”
Roku, which serves as a digital platform for streaming video content and apps, acts much like a smartphone for television screens. With more than 145 million users across the United States, Roku holds a dominant position in the streaming industry, making the case significant for both consumers and regulators.
As of publication, Roku has not issued an official response to the lawsuit.
Growing Scrutiny of Data Practices
For Florida, the lawsuit represents one of the first major enforcement actions under the state’s Digital Bill of Rights, signaling that officials intend to use the law to challenge what they view as exploitative data practices in the tech industry.
The Attorney General’s office emphasized that protecting children online remains a top priority: “We are sending a clear message — Florida will not tolerate companies that put profits above the privacy and safety of our children.”
