Cybersecurity Policy Report, Roku Accused of Children’s Privacy Violations in Florida AG’s Lawsuit, (Oct 15, 2025)
Organizations Mentioned:Roku, Inc.
Florida Attorney General James Uthmeier (R.) has filed a lawsuit in state court against Roku, Inc., alleging violations of Florida’s laws on children’s privacy.
According to the complaint, Roku has acknowledged processing, disclosing, and selling a wide variety of personal and sensitive data about its users to third parties, but Roku “does not acknowledge that it continues processing, disclosing, and selling this data even when it has every reason to know the data was collected from children.”
Specifically, the complaint alleges that Roku violated the state’s Digital Bill of Rights and Deceptive and Unfair Trade Practices Act by collecting and selling “sensitive personal data—including viewing habits, voice recordings, and other information from children—without authorization or meaningful notice to Florida families.”
The complaint asserts that Roku knows some of its users are children and that it has violated Florida’s privacy and consumer protection laws by “failing to obtain parental consent before selling or processing children’s data and by misrepresenting the effectiveness of its privacy controls and opt-out tools.”
The AG is seeking civil penalties, injunctive relief, and corrective measures to ensure that Roku “provides transparent disclosures, implements lawful parental-control mechanisms, and ceases unauthorized sale or processing of children’s data,” according to the lawsuit.
“Florida families deserve to know what is happening with their children’s personal information,” AG Uthmeier said in a news release. “Parents—not technology companies—direct the upbringing of their children. We will hold any company that conceals or exploits that information accountable.”
News: StateLegislation DataPrivacy DataSecurity LitigationEnforcement