Texas is suing all of the big TV makers for spying on what you watch

2025-12-1621:04360206www.theverge.com

TVs made by Sony, Samsung, LG, Hisense, and TCL are part of a ‘mass surveillance system,’ Attorney General Ken Paxton alleges.

Skip to main content

Comments
Getting the conversation ready...

TVs made by Sony, Samsung, LG, Hisense, and TCL are part of a ‘mass surveillance system,’ Attorney General Ken Paxton alleges.

TVs made by Sony, Samsung, LG, Hisense, and TCL are part of a ‘mass surveillance system,’ Attorney General Ken Paxton alleges.

Texas is suing five of the biggest TV makers, accusing them of “secretly recording what consumers watch in their own homes.” In separate lawsuits filed on Tuesday, Texas Attorney General Ken Paxton claims the TVs made by Sony, Samsung, LG, Hisense, and TCL are part of a “mass surveillance system” that uses Automatic Content Recognition (ACR) to collect personal data used for targeted advertising.

ACR uses visual and audio data to identify what you’re watching on TV, including shows and movies on streaming services and cable TV, YouTube videos, Blu-ray discs, and more. Attorney General Paxton alleges that ACR also captures security and doorbell camera streams, media sent using Apple AirPlay or Google Cast, as well as the displays of other devices connected to the TV’s HDMI port, such as laptops and game consoles.

The lawsuit accuses Samsung, Sony, LG, Hisense, and TCL of “deceptively” prompting users to activate ACR, while “disclosures are hidden, vague, and misleading.” Samsung and Hisense, for example, capture screenshots of a TV’s display “every 500 milliseconds,” Paxton claims. The lawsuit alleges that TV manufacturers siphon viewing data back to each company “without the user’s knowledge or consent,” which they can then sell for targeted advertising.

Along with these allegations, Attorney General Paxton also raises concerns about TCL and Hisense’s ties to China, as they’re both based in the country. The lawsuit claims the TVs made by both companies are “Chinese-sponsored surveillance devices, recording the viewing habits of Texans at every turn.”

Attorney General Paxton accuses the five TV makers of violating the state’s Deceptive Trade Practices Act, which is meant to protect consumers from false, deceptive, or misleading practices. Paxton asks the court to impose a civil penalty and to block each company from collecting, sharing, or selling the ACR data they collect about Texas-based consumers. Samsung, Sony, LG, Hisense, and TCL didn’t immediately respond to a request for comment.

Vizio, which is now owned by Walmart, paid $2.2 million to the Federal Trade Commission and New Jersey in 2017 over similar allegations related to ACR.

“This conduct is invasive, deceptive, and unlawful,” Paxton says in a statement. “The fundamental right to privacy will be protected in Texas because owning a television does not mean surrendering your personal information to Big Tech or foreign adversaries.”

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
  • Emma Roth


Read the original article

Comments

  • By autoexec 2025-12-1821:517 reply

    I'm happy to see it. They should have included Roku in that too!

    > Roughly twice per second, a Roku TV captures video “snapshots” in 4K resolution. These snapshots are scanned through a database of content and ads, which allows the exposure to be matched to what is airing. For example, if a streamer is watching an NFL football game and sees an ad for a hard seltzer, Roku’s ACR will know that the ad has appeared on the TV being watched at that time. In this way, the content on screen is automatically recognized, as the technology’s name indicates. The data then is paired with user profile data to link the account watching with the content they’re watching.

    https://advertising.roku.com/learn/resources/acr-the-future-...

    I wouldn't be surprised if my PS5 was doing the same thing when I'm playing a game or watching a streaming service through it.

    • By VTimofeenko 2025-12-1823:11

      Most likely case is that the tv is computing hash locally and sending the hash. Judging by my dnstap logs, roku TV maintains a steady ~0.1/second heartbeat to `scribe.logs.roku.com` with occasional pings to `captive.roku.com`. The rest are stragglers that are blocked by `*.roku.com` DNS blackhole. Another thing is `api.rokutime.com`, but as of writing it's a CNAME to one of `roku.com` subdomains.

      The block rates seem to correlate with watch time increasing to ~1/second, so it's definitely trying to phone home with something. Too bad it can't since all its traffic going outside LAN is dropped with prejudice.

      If your network allows to see stuff like that, look into what PS5 is trying to do.

    • By nitwit005 2025-12-1822:327 reply

      That sounds so expensive it's hard to see it making money. You'd processing a 2fps video stream for each customer. That's a huge amount of data.

      And all that is for the chance to occasionally detect that someone's seen an ad in the background of a stream? Do any platforms even let a streamer broadcast an NFL game like the example given?

      • By nemomarx 2025-12-1822:501 reply

        I don't think they mean that kinda streamer - the idea is the roku tv can tell you're watching an ad even if it's on amazon prime, apple tv, youtube, twitch, wherever, and associate the ad watching with your roku account to potentially sell that data somehow?

        That way they aren't cut out of the loop by you using a different service to watch something and still have a 'cut'.

      • By klik99 2025-12-1823:101 reply

        Are there video "thumbprints" like exists for audio (used by soundhound/etc) - IE a compressed set of features that can reliably be linked in unique content? I would expect that is possible and a lot faster lookup for 2 frames a second. If this is the case, the "your device is taking a snapshot every 30 seconds" sounds a lot worse (not defending it - it's still something I hope can be legislated away - something can be bad and still exaggerated by media)

      • By 0cf8612b2e1e 2025-12-1822:40

        I assume these systems are calculating an on device perceptual hash. So not that much data needs get flown back to the mothership.

      • By Spooky23 2025-12-1823:08

        You only need to grab a few pixels or regions of the screen to fingerprint it. They know what the stream is and can process it once centrally if needed.

      • By htrp 2025-12-1822:51

        Attribution is very painful and advertisers will pay lots of money to close that loop.

      • By bequanna 2025-12-1823:07

        The actual screenshot isn’t sent, some hash is generated from the screenshot and compared against a library of known screenshots of ads/shows/etc for similarity.

        Not super tough to pull off. I was experimenting with FAISS a while back and indexed screenshots of the entire Seinfeld series. I was able take an input screenshot (or Seinfeld meme, etc) and pinpoint the specific episode and approx timestamp it was from.

      • By marbro 2025-12-1822:38

        [dead]

    • By micromacrofoot 2025-12-1823:23

      The PS5 doesn't need to, they get it all in metadata

    • By nrhrjrjrjtntbt 2025-12-1822:164 reply

      So potentially completely noncompliant if used in a business. E.g. it may have HIPAA, top secret etc.

      • By Spooky23 2025-12-1823:09

        Yeah that’s why Webex is still in business. TVs are a great entry point to LANs.

      • By cluckindan 2025-12-1823:08

        Boardroom presentation TVs in publicly traded companies would yield insider information.

      • By gruez 2025-12-1822:241 reply

        Sending 4k screenshots twice a second to a server would be tremendously bandwidth hungry. My guess is that it's all done locally.

      • By kevin_thibedeau 2025-12-1822:331 reply

        It is a violation of the VPPA to collect this for streaming services and prerecorded media. Scheduled broadcast and cable TV aren't covered.

    • By metabagel 2025-12-1822:591 reply

      Time for me to get Apple TV.

    • By ms7m 2025-12-1822:121 reply

      This is especially annoying and just incredibly creepy -- I was watching a clip of Smiling Friends on YouTube (via my Apple TV), and I suddenly got a banner telling me to watch this on HBO Max.

      I never felt more motivated to pi-hole the TV.

      • By gruez 2025-12-1822:252 reply

        >I never felt more motivated to pi-hole the TV.

        Or just disconnect from the internet entirely? You already have an apple tv. Why does your tv need internet access?

    • By jgalt212 2025-12-1823:01

      > > Roughly twice per second, a Roku TV captures video “snapshots” in 4K resolution.

      Isn't that too much data to even begin to analyze? The only winner here seems like S3.

  • By spike021 2025-12-1820:576 reply

    I've had the advertising settings disabled on my LG C2 for a while and yesterday I decided to browse the settings menu again and found that a couple new ones had been added and turned on by default.

    Good times.

    • By pton_xd 2025-12-1821:135 reply

      This is what seemingly every app does. They add 15 different categories for notifications / emails / whatever, and then make you turn off each one individually. Then they periodically remove / add new categories, enabled by default. Completely abusive behavior.

      • By wmeredith 2025-12-1821:342 reply

        Want to unsubscribe from this email? Ok, you can do it in one click, but we have 16 categories of emails we send you, so you'll still get the other 15! It's a dark pattern for sure.

        • By pixl97 2025-12-1821:581 reply

          1.3076744e+12 -1 is a lot of categories to click.

        • By jrootabega 2025-12-1821:422 reply

          And if you just add them to your spam filter, it won't even work easily, because they deliberately shift around the domains and subdomains they send from every so often.

      • By ipython 2025-12-1821:232 reply

        Yep. Had that happen with the United app a few weeks ago. Unsolicited spam sent via push notification to my phone. Turns out that they added a bunch of notification settings - of course all default to on.

        Turned them all off except for trip updates that day.

        Best part is- yesterday I received yet another unsolicited spam push message. With all the settings turned off.

        So these companies will effective require you to use their app to use their service, then refuse to respect their own settings for privacy.

        • By vlachen 2025-12-1821:301 reply

          I've taken to "Archiving" apps like this on my Android phone. When I need it, I can un-archive it to use it. Keeps the list of things trying to get my attention a little bit smaller.

        • By whatsupdog 2025-12-1822:002 reply

          Why do you even need the United app? They have a website.

      • By hansvm 2025-12-1822:48

        That behavior is what finally got me off Facebook awhile back.

        Edit: And something similar with Windows now that I think about it; there was a privacy setting which would appear to work till you re-entered that menu. Saving the setting didn't actually persist it, and the default was not consumer-friendly.

      • By bradleyankrom 2025-12-1821:181 reply

        LinkedIn does the same thing re emails, notifications, etc that they send. I think I turned off notifications that connections had achieved new high scores in games they play on LinkedIn. Absurd.

        • By hopelite 2025-12-1821:261 reply

          I’m at the point where I just cleared everything out of Linkedin and have designated all LinkedIn emails as spam. It’s just a modern equivalent to a slave market, where slaves vote to be the pick-me alpha slave.

      • By fragmede 2025-12-1822:00

        I especially like how they add it to the bottom of a widget with hidden scrollbars, just to make it totally missable that they added them at all!

    • By steve_adams_86 2025-12-1823:13

      I have a Hisense TV which recently did the same. It turned on personal recommendations and advertising. I have no idea where the ads are or how it works; I only use devices over HDMI. I'm sure the TV is spying on me incessantly nonetheless.

    • By mgiampapa 2025-12-1821:53

      I firewall my TV from my Printer just so they don't get any ideas.

    • By BloondAndDoom 2025-12-1821:021 reply

      I’m using my tv with all the stuff disabled (the ones it’s possibly disable), but even then I realize I don’t trust them and I don’t trust their choices. Because they get to say sorry and not held responsible.

      I want smart tv because I want use my streaming services but that’s it. I also want high quality panels. Maybe the solution is high quality TVs where you just stick a custom HDMI device (similar to Amazon fire stick) and use it as the OS. Not sure if there are good open source options since Apple seems to be another company that keeps showing you ads even if you pay shit load of money for their hardware and software, Jobs must turning in his grave

      • By chasing0entropy 2025-12-1821:28

        The solution is a separate, internet connected device to play media connected to a non-connected tv.

    • By myself248 2025-12-1822:53

      I call this Zucking.

      When a new permission appears without notice and defaults to the most-violating setting, gaslighting you into the illusion of agency but in fact you never had any, you've been Zucked.

    • By babypuncher 2025-12-1821:142 reply

      The real trick is to never connect your TV to the internet under any circumstances. These things are displays, they don't need the internet to do their job. Leave that to the game consoles and streaming boxes.

      • By m463 2025-12-1821:262 reply

        I worry about the new cellular standards that support large scale iot.

        Search for 5g miot or 5g massive iot or maybe even 5g redcap

      • By spike021 2025-12-1821:50

        It's going to happen on any device. It's a software thing. If LG isn't doing it, it's Netflix, Amazon Prime, etc. My PS5 basically shows ads on some system ui screens (granted mostly for "game" content but it still counts).

HackerNews