Data Sold for Profit — Without Parents’ Knowledge
According to the complaint, Roku and its Florida subsidiary collected and sold sensitive data — from voice recordings and viewing histories to device identifiers — without adequate notice or consent. The suit further alleges Roku “willfully disregarded” users’ ages, failing to deploy industry-standard age verification or child-profile systems, allowing it to “bury its head in the sand” while continuing to profit from minors’ data.
Even when users explicitly indicated they were children, the lawsuit says Roku continued processing and selling their information, directly violating Florida’s privacy law.
The company allegedly partnered with “intrusive” data brokers, including Kochava Inc., a firm currently facing its own FTC lawsuit for selling consumer geolocation data. These third parties, the complaint claims, could reconstruct children’s identities by merging Roku data with other datasets.
Penalties Could Reach Millions
Uthmeier seeks civil penalties of up to $150,000 per violation under the Florida Digital Bill of Rights and $10,000 per violation under consumer protection law. The state also demands injunctive relief to force Roku to implement lawful parental controls and stop unauthorized data sales.
“Roku knowingly violated user privacy to boost its advertising revenue,” Uthmeier alleged, calling the company’s actions “unfair, deceptive, and unconscionable.”
Roku, which serves 145 million users nationwide, could face millions in fines if the court rules in Florida’s favor. The company did not immediately respond to requests for comment.
