Does opting out of TV tracking work?

Your smart TV may still be tracking what you watch even after you opt out, depending on the brand.

Researchers at Northeastern University investigated whether opting out of Automatic Content Recognition (ACR) tracking on smart TVs is effective. They monitored 12 TVs from 10 manufacturers, testing various scenarios and inputs. While most TVs, including LG, Amazon Fire TV, Sony Bravia (Google TV), and Vidaa OS devices, successfully stopped ACR tracking after opting out, Samsung's Tizen OS and Roku TVs continued to transmit some data. Walmart's Vizio TV showed no change in ACR-correlated traffic post opt-out. The study also found that ACR primarily tracks over-the-air broadcasts and first-party streaming services, with limited activity on third-party apps and screen mirroring. In a separate discovery, a vulnerability in Vidaa OS exposed unencrypted ACR data from over a million TVs before being addressed by the manufacturer.

The study highlights a significant gap in consumer privacy controls for smart TVs, with some manufacturers like Samsung and Roku falling short of fully disabling ACR tracking upon user request. Vizio's performance suggests a continued disregard for opt-out preferences, echoing past FTC settlements. This indicates that consumers cannot universally trust opt-out mechanisms across all brands, necessitating further scrutiny and potential regulatory action to ensure transparency and compliance with privacy choices. The fact that ACR activity persists suggests that manufacturers may prioritize data collection for advertising and analytics over user privacy preferences, a trend that could extend to other connected devices.

The findings suggest a fragmented market where ACR implementation and adherence to opt-out settings vary widely, impacting consumer trust and data protection. For consumers seeking to protect their privacy, using a separate streaming device without ACR or disconnecting smart TVs from the internet are the most reliable solutions, though not always convenient. The report also points to the need for enhanced encryption and clear disclosure of ACR practices by manufacturers, pushing for greater accountability from the industry and regulatory bodies to enforce meaningful privacy protections for smart TV users.