Your Smart TV Takes a Screenshot Every Half Second
Smart TVs run Automatic Content Recognition (ACR) that fingerprints every frame on your screen, including content from HDMI inputs. Samsung, LG, Vizio, and Roku all face lawsuits over this surveillance. A consumer cybersecurity and data privacy explainer.
What is ACR and why should you care?
Automatic Content Recognition, or ACR, is a surveillance technology built into nearly every smart TV sold since 2015. It works by capturing a screenshot or audio fingerprint of whatever is on your screen at regular intervals. On most implementations, a frame is captured every 500 milliseconds. That is two screenshots per second, roughly 7,200 per hour, for every hour your TV is powered on [1].
The captured frames are hashed into digital fingerprints and transmitted to a remote server, where they are compared against a database of known content. The system can identify what show you are watching, what commercial is playing, what game you are playing, and even what you are browsing on a connected laptop or gaming console through HDMI inputs [2].
This is not hypothetical. This is happening right now on Samsung, LG, Sony, Vizio, Hisense, and TCL televisions in hundreds of millions of homes.
ACR watches more than your streaming apps
A common misconception is that ACR only tracks content from the TV's built-in apps. That is wrong. ACR captures frames from whatever is displayed on the screen, regardless of source. If you connect a PlayStation, a Nintendo Switch, a laptop, or an Apple TV via HDMI, ACR captures that content too [3].
This means:
- Gaming sessions are fingerprinted and matched
- Work presentations displayed on your TV are captured
- Personal photos and videos shown from a USB drive or cast from your phone are sampled
- Video calls conducted through a connected laptop are screenshotted
The TV does not distinguish between a Netflix show and your private Zoom meeting. It captures frames from all of them.
The Texas Attorney General lawsuit
In December 2025, Texas Attorney General Ken Paxton filed lawsuits against Sony, Samsung, LG, Hisense, and TCL under the Texas Data Privacy and Security Act (TDPSA) and the Deceptive Trade Practices Act. The suits allege that these manufacturers collected viewing data without obtaining proper informed consent [4].
The lawsuits specifically cite:
- Buried consent mechanisms. Opt-in prompts were hidden inside lengthy initial setup flows where users click "agree" to dozens of terms without meaningful disclosure of ACR
- Opt-out buried behind dark patterns. Samsung's setup enables ACR with a single button press during initial configuration, but disabling it requires navigating through 15 or more menu clicks across multiple settings screens
- Collection from HDMI inputs. The lawsuits allege manufacturers hid that ACR captures content from external devices — not only built-in apps
- Data sales to third parties. Collected viewing data was sold to advertisers, data brokers, and analytics firms without specific consumer consent
Texas is not alone. The FTC fined Vizio $2.2 million back in 2017 for tracking 11 million TVs without consent [5]. But enforcement has been sporadic, and the technology has only become more pervasive since then.
Samsung: one click to enroll, fifteen clicks to escape
Samsung's dark pattern is the most well-documented. During initial TV setup, a screen appears asking users to "enhance your experience" or similar language. Pressing OK enables ACR, personalized advertising, and data sharing in a single tap [6].
Turning it off requires:
- Press the Home button
- Navigate to Settings
- Select General & Privacy
- Select Privacy
- Open Samsung Privacy Policy
- Scroll to and select Viewing Information Services
- Toggle off "Viewing Information Services"
- Confirm the toggle
- Go back to Privacy
- Select Interest-Based Advertisement Service
- Toggle off interest-based ads
- Confirm that toggle
- Go back to Privacy
- Open Cross-Device Tracking
- Disable cross-device tracking
- Confirm once more
That is the design. One click to consent. Fifteen or more clicks, spread across multiple menu trees, to revoke it. This is the textbook definition of a dark pattern, and it is exactly what the Texas lawsuit targets.
Kentucky HB 692: the first state ACR law
In 2025, Kentucky became the first state to pass a law specifically targeting ACR technology. House Bill 692 requires television manufacturers to [7]:
- Provide clear, conspicuous disclosure that ACR technology is present before activation
- Obtain affirmative opt-in consent before enabling ACR data collection
- Offer a simple, accessible opt-out mechanism that is no more difficult than the opt-in process
- Prohibit collection from HDMI inputs without separate, explicit consent
- Require annual data deletion upon consumer request
The law takes effect in January 2026. Other states, including California, Illinois, and New York, have introduced similar bills, though none have passed as of this writing.
What data is collected and who buys it
ACR data is far more granular than traditional TV ratings. Here is what a typical ACR data package includes [8]:
- Content identification. Exact show, episode, timestamp, and duration
- Ad exposure. Which commercials you watched, skipped, or muted
- Viewing habits. Time of day, day of week, binge patterns, channel surfing behavior
- Device graph. What other devices are connected via HDMI
- Household composition. Inferred number of viewers, age ranges, and interests based on content patterns
- Cross-device correlation. Matching your TV viewing to your phone and laptop activity through IP address and device graph partnerships
This data is purchased by:
- Advertising networks (targeted TV and digital ad placement)
- Political campaigns (voter targeting based on news viewing habits)
- Data brokers (Acxiom, Oracle Data Cloud, LiveRamp)
- Streaming services (competitive intelligence on what their subscribers watch elsewhere)
- Insurance companies (lifestyle risk profiling)
- Retail chains (correlating TV ad exposure with in-store purchases)
A single household's annual ACR data is worth between $5 and $30 to advertisers. Across 200 million smart TVs in the US alone, that is a multi-billion dollar data market [9].
How to disable ACR on every major brand
Samsung
- Settings > General & Privacy > Privacy > Viewing Information Services and toggle OFF
- Settings > General & Privacy > Privacy > Interest-Based Ads and toggle OFF
- Settings > General & Privacy > Privacy > Cross-Device Tracking and toggle OFF
LG (webOS)
- Settings > General > Additional Settings > Live Plus and toggle OFF
- Settings > General > Additional Settings > Advertisement and disable personalized advertising
- Settings > General > About This TV > User Agreements and revoke viewing information consent
Sony (Google TV / Android TV)
- Settings > Privacy > Usage and Diagnostics and toggle OFF
- Settings > Privacy > Ads and enable "Delete advertising ID"
- Settings > Device Preferences > Samba Interactive TV (or similar ACR partner) and toggle OFF
- On Bravia models: Settings > System Preferences > Samba TV and disable
Hisense
- Settings > Privacy > Smart TV Experience and toggle OFF
- Settings > Privacy > Viewing Data and toggle OFF
- Settings > Privacy > Terms & Policies > Ads and disable personalized ads
TCL (Roku TV)
- Settings > Privacy > Smart TV Experience and uncheck "Use Info from TV Inputs"
- Settings > Privacy > Advertising and check "Limit Ad Tracking"
- Settings > Privacy > Microphone and set to "Channel Only" or "Disabled"
Vizio (SmartCast)
- Menu > Admin & Privacy > Viewing Data and toggle OFF
- Menu > Admin & Privacy > Advertising and enable "Limit Ad Tracking"
Nuclear option
If you do not need smart features, simply do not connect your TV to WiFi. Use an external streaming device (Apple TV, Chromecast, Roku box) that you control separately. An unconnected smart TV cannot phone home with ACR data. For existing connections, you can also block the TV's known telemetry domains at the router level using Pi-hole or similar DNS filtering [10].
The bigger picture
ACR is a symptom of a broader problem: the business model of modern consumer electronics has shifted from selling you a product to selling your data after you buy the product. Television manufacturers now subsidize hardware costs with advertising and data revenue. This is why a 65-inch 4K TV costs $400 in 2026 when the equivalent technology cost $2,000 a decade ago.
You are not getting a deal. You are paying the rest of the price with your behavioral data, captured two frames per second, for as long as you own the television.
Sources
- Northeastern University, "Watching You Watch: The Tracking Ecosystem of Over-the-Top TV Streaming Devices," ACM CCS 2019
- Consumer Reports, "How to Turn Off Smart TV Snooping Features," updated March 2026
- Federal Trade Commission, "Vizio Settles FTC Charges for Collecting and Selling Consumer Viewing Data," February 2017
- Office of the Texas Attorney General, "AG Paxton Sues Major TV Manufacturers Over Unlawful Data Collection," December 2025
- FTC, "FTC Issues $2.2M Fine Against Vizio for Unauthorized Collection of Viewing Data," 2017
- The Verge, "Samsung's Smart TV Privacy Settings Are Intentionally Confusing," October 2025
- Kentucky General Assembly, HB 692, "AN ACT relating to automatic content recognition technology," 2025
- Vizio, Inc., "Inscape Data: TV Intelligence," marketing documentation (archived)
- eMarketer, "US Connected TV Advertising Spending," Annual Report 2025
- Pi-hole Project, "Network-Wide Ad Blocking," https://pi-hole.net
Want us to check your Smart TV setup?
Our scanner detects this exact misconfiguration. plus dozens more across 38 platforms. Free website check available, no commitment required.
