Full Report
In December, Texas sued five major smart TV manufacturers — Samsung, Sony, LG, Hisense and TCL Technology — for allegedly collecting ACR data without consumers in the state being fully informed and consenting.
Analysis Summary
# Regulation/Compliance: Texas ACR Data Collection Practices Enforcement Action
## Overview
This summary details the regulatory and legal action taken by the State of Texas against major smart TV manufacturers (Samsung, Sony, LG, Hisense, and TCL Technology) concerning the collection and processing of Automated Content Recognition (ACR) data. The core issue is the alleged failure by manufacturers to fully **inform and obtain consent** from Texas consumers before capturing and monetizing their real-time viewing habits. The matter concluded with Samsung agreeing to specific corrective actions.
## Key Details
- Issuing Authority: Texas Attorney General (Ken Paxton)
- Effective Date: The settlement with Samsung was secured shortly before February 27th, 2026 (date of the article reporting the agreement). The original lawsuit filing was in December [prior to the reporting date].
- Jurisdiction: State of Texas (applies to all consumers within Texas).
- Status: **Enforced/Settled** (for Samsung); **Ongoing Litigation** (for other manufacturers).
## Requirements
### Mandatory Requirements (As established by the Samsung Settlement/Texas Enforcement Focus)
1. **Explicit Consent Requirement:** Manufacturers must stop collecting and processing ACR viewing data *without first obtaining consent* from Texas consumers.
2. **Informed Decision Making:** Manufacturers must implement disclosure and consent screens that are "clear and conspicuous" to ensure Texans can make an informed decision about data collection and use.
3. **Data Use Transparency:** The informed decision must cover *how* the collected data will be used (e.g., for advertising, sale to third parties).
### Recommended Practices (General Privacy Best Practices derived from enforcement context)
1. **Periodic Re-evaluation:** Regularly review and update privacy policies to ensure they align with evolving state or federal data protection standards, even if current practices are claimed to be compliant.
2. **Comprehensive Data Mapping:** Maintain clear internal documentation on what ACR data is collected, how it is processed, where it is stored, and with whom it is shared, to rapidly address future inquiries.
3. **Consistency Across Jurisdictions:** While this action is Texas-specific, adopt the highest standard across all product rollouts to minimize future jurisdictional compliance risks.
## Affected Organizations
- Industries: Consumer Electronics, Smart TV Manufacturing, Data Brokers/Advertisers that utilize household viewing data.
- Organization Size: All manufacturers marketing smart TVs capable of collecting ACR data and selling/using that data that operate within or sell into the Texas market.
- Geographic Scope: Specifically targets compliance obligations within the **State of Texas**, but sets a precedent for national enforcement based on state consumer protection laws.
## Compliance Timeline
- **December [Prior Year]:** Texas Attorney General files lawsuits against five major TV manufacturers.
- **[Date of Settlement]:** Samsung agrees to terms, promising to "promptly update" smart TVs.
- **Post-Settlement:** Samsung must deploy updates creating new disclosure and consent screens. (Specific date for full deployment is not detailed but implied immediate/prompt action).
- **Ongoing:** Lawsuits with Sony, LG, Hisense, and TCL Technology continue.
## Implementation Guidance
### Assessment Phase
- **Data Flow Audit:** Immediately audit all ACR data streams to confirm precisely what information is currently being collected, processed, and monetized from devices sold in Texas.
- **Policy Review:** Evaluate existing privacy disclosures and consent mechanisms against the standard of "clear and conspicuous" notices referenced in the settlement.
### Implementation Phase
- **Develop New Consent UI/UX:** Design and develop new on-screen notifications (for initial setup and accessible via settings) that clearly explain ACR data collection, purpose, and opt-out rights.
- **Backend Enforcement:** Ensure that data collection/processing is technically halted or restricted until affirmative consent is received from users identified as being in Texas.
### Validation Phase
- **Internal Audits:** Conduct internal reviews to confirm that the new consent screens activate correctly and that data capture ceases for users who opt-out.
- **Legal Sign-off:** Obtain legal confirmation (especially from counsel familiar with Texas consumer protection law) that the new disclosures meet the "clear and conspicuous" mandate.
## Technical Requirements
1. **Consent Gate Implementation:** Require a positive user interaction (affirmative opt-in) before ACR data collection begins.
2. **Granular Control:** Implementation should allow users to control privacy settings "at any time," implying persistent in-settings management rather than a one-time setup choice.
3. **Clear Labeling:** The mechanism used to gain consent must clearly articulate the data ("ACR viewing data") and its use (e.g., "sharing with advertisers").
## Penalties & Enforcement
- Fines: The article does not detail specific civil penalties or fines levied against Samsung as part of the settlement, only that the lawsuit was resolved via an agreement to alter practices. Historically, consumer protection lawsuits often include monetary relief and stipulated penalties for future non-compliance.
- Other Consequences: Negative public relations, immediate legal costs, and mandatory, costly software/firmware updates across installed product bases.
- Enforcement: Direct enforcement action by the **Texas Attorney General's Office** leveraging state consumer protection and privacy statutes.
## Related Standards
- **U.S. State Privacy Laws (e.g., Texas Deceptive Trade Practices Act):** The legal basis for the enforcement action likely stems from existing deceptive trade practices or specific state privacy legislation that mandates transparency and consent for data collection.
- **General Data Protection Regulation (GDPR) Principles (Conceptual Alignment):** Although a state action, the requirement for "informed," "clear," and "conspicuous" consent aligns conceptually with core GDPR principles of lawful basis for processing.
## Resources
- Official Documentation: Texas Attorney General Press Release regarding the Samsung agreement (Link provided in original context: `https://www.texasattorneygeneral.gov/news/releases/attorney-general-paxton-secures-major-agreement-samsung-ensure-texans-are-protected-smart-tvs`)
- Guidance Documents: State consumer protection advisories published by the Texas Governor's office or AG regarding IoT/Smart Device Privacy.
- Tools: Consumer privacy management platforms capable of managing consent flags based on geolocation or user profile data.
## Practical Recommendations
1. **Treat State AG Actions as Precedent:** Immediately review ACR/IoT data collection practices in light of the Texas action, assuming other states may follow suit with similar litigation.
2. **Prioritize Consent Visibility:** Revamp consumer-facing privacy choices to meet the highest standard of clarity expected by regulators, moving beyond passive or implied consent.
3. **Engage Litigation Counsel:** Manufacturers facing ongoing litigation (Sony, LG, etc.) must work closely with counsel to craft settlement or defense strategies that address the core transparency gap identified by Texas.