Your Smart TV Takes 7,200 Screenshots Every Hour (Texas AG Lawsuit) - YouTube
Your Smart TV Takes 7,200 Screenshots Every Hour (Texas AG Lawsuit) - YouTube
Your Smart TV Is Watching You Back
How Automated Content Recognition technology turns living-room screens into data pipelines — and what you can do about it
February 2026
BOTTOM LINE UP FRONT
Major smart TV makers silently harvest what you watch via Automated Content Recognition (ACR) technology. A landmark 2024 multi-university study confirmed that Samsung and LG televisions capture fingerprints of your viewing data and transmit it to manufacturer servers, even when the TV is used solely as an external monitor.
In December 2025, Texas Attorney General Ken Paxton filed lawsuits against Samsung, LG, Sony, Hisense, and TCL alleging deceptive trade practices, and a class-action suit followed in New York in January 2026.
- The UCL study involved multiple institutions (not just UCL),
- opting out of ACR does in fact halt ACR-specific network traffic,
- ACR fingerprints are hashes rather than raw screenshots,
- Netflix content is not captured due to copyright restrictions,
- the Vizio enforcement milestone occurred in 2017 (not 2021).
The surveillance economy around smart TV data is real and growing. Consumers have limited but meaningful mitigation options. Federal legislation has not yet been enacted.
What Is ACR — and Who Uses It?
Walk into any electronics store today and it is nearly impossible to buy a television that is not a "smart" TV. Manufacturers have wired their sets with sophisticated software that does far more than display the picture you intend to watch. At the heart of this ecosystem is a technology called Automated Content Recognition, or ACR. ACR works by periodically capturing frames or audio from whatever is on your screen, converting those captures into a compact digital fingerprint, and then matching that fingerprint against a cloud database of known television programs, movies, advertisements, and other content. The process is analogous, as researchers have noted, to the way the music-identification app Shazam recognizes a song from a brief audio clip — except that it happens continuously, invisibly, and by default.
According to Samsung's own advertising materials reviewed by academic researchers, Samsung TVs take glass-level screenshots approximately every 500 milliseconds — roughly twice per second. LG TVs, which route ACR data through a third-party company called Alphonso (a subsidiary of LG Ad Solutions), transmit fingerprint packets every 15 seconds. Vizio, in promotional literature aimed at advertisers, describes capturing both image pixels and audio in real time to build what it calls "meaningful viewership insights."
The technology is not limited to Samsung and LG. SambaTV — originally called Flingo, which ntroduced video-based ACR in 2011 — supplies ACR infrastructure to Sony, Toshiba, Panasonic, and numerous smaller brands. As of 2024, SambaTV reports its tracking technology is embedded in more than 40 million devices globally. Hisense and TCL deploy their own ACR systems. Google TV, used in Hisense, Sony, and TCL sets, does not itself operate ACR, but those manufacturers run their own ACR layers on top of the Google platform. Smart TV penetration now stands at roughly three-quarters of U.S. households, according to market research cited in the 2024 peer-reviewed study described below. That translates to tens of millions of homes where ACR is active by default.
What the Peer-Reviewed Research Shows
The most comprehensive technical examination of smart TV ACR to date was published at the 2024 ACM Internet Measurement Conference in Madrid. The paper, "Watching TV with the Second-Party: A First Look at Automatic Content Recognition Tracking in Smart TVs," was produced by a team spanning University College London, Universidad Carlos III de Madrid, and the University of California, Davis. Lead authors included Gianluca Anselmi, Yash Vekaria, and Anna Maria Mandalari. The researchers connected Samsung and LG smart TVs to a dedicated network hub in both the United Kingdom and the United States, then carefully recorded all data transmitted to external servers across a range of usage scenarios: watching broadcast television via an antenna, streaming from the TV's built-in apps, streaming from third-party apps such as Netflix, and using the television purely as an external display for a laptop connected via HDMI.
Their key findings:
ACR is input-agnostic. ACR network traffic was observed when the TV was used as a simple external monitor for a laptop. Whatever appears on screen — work documents, a video call, ersonal browsing — may be fingerprinted and sent to the manufacturer's servers.
Opting out works — for ACR specifically. In a notable contrast to other privacy research findings, the team found that opting out of ACR did halt network traffic to ACR domains. However, the opt-out process is deliberately complex (see Consent Architecture below), and other data-collection systems on the TV continue operating after an ACR opt-out.
Netflix content was not captured. In the U.S., third-party streaming services such as Netflix were not tracked via ACR, apparently due to copyright protections and contractual restrictions. Linear television and HDMI-connected device content was captured in the U.S. test environment.
Regional differences exist. The UK and U.S. deployments contact different server domains, reflecting geographic data-routing distinctions. In the UK, copyright constraints appeared to further limit what content was fingerprinted.
"The way in which ACR opt-out is configured by these TVs is extremely complex, requiring users to opt-out of several advertising and tracking settings with multiple clicks under different sub-settings. This makes it extremely difficult for a typical user to exercise opt-out of ACR. On the other hand, smart TVs have made one-click opt-ins very easy to execute."— Yash Vekaria, UC Davis, co-author of the 2024 ACR study
The researchers also noted that when they submitted GDPR data-access requests to Samsung and LG to see what personal information was held, the responses were vague and did not appear to correspond to the volume of data the team had observed being transmitted from the TVs.
The Consent Architecture Problem
A recurring theme in both academic research and law enforcement complaints is what regulators have termed asymmetric choice architecture. When a new smart TV is powered on for the first time, the setup process is designed to make opting into data collection a single step while making opting out a multi-screen ordeal buried in submenus.
The Texas Attorney General's investigation included hands-on testing: state investigators purchased a Samsung Tizen-platform TV at a Best Buy in Austin, documented the setup process, and found that opting in to ACR tracking required one click, while opting out required navigating more than 15 clicks across multiple distinct menus. Consumer Reports' own 2025 testing of current-model televisions from TCL, Sony, LG, Hisense, and others confirmed similarly fragmented opt-out paths, with ACR-related settings often labeled with non-intuitive terms such as "Viewing Information Services" or "Live Plus" rather than "tracking" or "data collection."
LG's privacy policy also references a third-party analytics company (Alphonso) without explaining what role it plays in the consumer viewing experience.Consumer Reports reached out to LG for clarification and had not received aresponse at the time of publication of its 2025 smart TV privacy guide.
What Data Is Collected — and Who Buys It
The economic engine underlying ACR is targeted advertising. Smart TV manufacturers and their ACR partners aggregate viewing histories into audience segments — classifications such as sports enthusiasts, frequent cooking-show viewers, or news consumers of a particular political lean — and sell access to those segments to advertisers. Advertisers can then use that TV-viewing data to follow a viewer across other devices: smartphones, tablets, and laptop browsers.
The categories of data documented by researchers and regulators include: content viewed (titles, channels, time of day, and duration); IP address and Wi-Fi network identifier; device identifiers such as MAC addresses; app usage patterns; and, where microphone access is granted, voice commands. Data brokers — companies that purchase raw data from TV manufacturers and repackage it for resale — can combine viewing histories with third-party data sets to append demographic inferences including estimated income, household size, political leanings, and health interests.
The economic incentive is substantial. Vizio CEO William Baxter stated plainly in a 2019 interview that the company's advertising and data business was more profitable than selling television hardware. This dynamic — subsidizing hardware with surveillance revenue — is now an industry-wide model. As early as 2021, Vizio's earnings disclosures confirmed that Platform+ advertising revenue was outpacing TV sales margins. The practical effect is that cheap smart TVs carry a hidden cost measured not in dollars but in data.
A Brief Regulatory History
The first major U.S. enforcement action against smart TV ACR practices came in February 2017, when the Federal Trade Commission and the New Jersey Attorney General jointly sued Vizio, Inc. Regulators alleged that starting in February 2014, Vizio had secretly installed ACR software — marketed as "Smart Interactivity" — on 11 million televisions, in some cases remotely updating sets purchased before the software existed. The company collected viewing data on a second-by-second basis and sold it to third parties, according to the complaint, without meaningful disclosure or consent.
Vizio settled for $2.2 million: $1.5 million to the FTC and $1 million to New Jersey (with $300,000 suspended). The settlement required Vizio to prominently disclose data collection practices and obtain affirmative consent before sharing viewing information, to delete data collected before March 1, 2016, and to submit to a 20-year third-party compliance monitor. A related class-action lawsuit settled in 2018 for $17 million, covering approximately 16 million Vizio smart TV users. The Vizio case set a legal precedent — the FTC explicitly characterized television viewing data as "sensitive information" requiring opt-in consent — but it did not prompt wider industry reform. Samsung, LG, and the other manufacturers continued ACR practices under their own frameworks.
The next major enforcement wave came in December 2025, when Texas Attorney General Ken Paxton filed five separate lawsuits against Samsung, LG, Sony, Hisense, and TCL under the Texas Deceptive Trade Practices Act — the same statute that had been used to secure a $1.4 billion settlement with Meta in 2024 and a $1.375 billion settlement with Google in 2025. The complaints alleged that these manufacturers unlawfully collected and monetized consumers' viewing data without proper disclosure, made opt-out functionally inaccessible, and misrepresented the nature of the data collection.
A Texas court issued a temporary restraining order against Hisense on December 17, 2025, halting ACR data collection from Texas consumers pending litigation. A similar order against Samsung was issued on January 6, 2026, though it was subsequently suspended ahead of a scheduled hearing. On January 9, 2026, a class-action lawsuit targeting Samsung's ACR practices was filed in New York under the federal Video Privacy Protection Act.
The National Security Dimension
The lawsuits against Hisense and TCL introduced a national-security argument that has attracted significant attention. Both companies are headquartered in China, and Texas prosecutors argue that their ACR data — aggregated profiles of what tens of millions of American households watch in real time — may be subject to disclosure demands under China's National Security Law, which can compel companies to cooperate with government intelligence requests.
"Companies, especially those connected to the Chinese Communist Party, have no business illegally recording Americans' devices inside of their own homes. This conduct is invasive, deceptive, and unlawful."— Texas Attorney General Ken Paxton, December 2025
Privacy law experts interviewed by the International Association of Privacy Professionals cautioned that ACR technology does not transmit raw video feeds but rather hashed content fingerprints. The direct surveillance risk is primarily the behavioral data — knowing, for example, which news sources a household regularly watches, how they respond to political advertising, and what products they appear interested in. Experts noted that such behavioral profiles carry their own national-security sensitivity, independent of any direct visual surveillance capability.
Fact-Checking the Video
The video transcript reviewed for this article makes a number of claims that are broadly accurate but contain several specific errors or imprecisions worth noting for consumers seeking reliable information.
ACCURATE: ACR is active by default on Samsung and LG TVs and tracks content regardless of source (linear TV, streaming, external HDMI devices), as confirmed by the 2024 peer-reviewed study.
ACCURATE: The opt-out process is deliberately more complex than opting in, a fact documented by researchers and confirmed by the Texas AG's own testing.
ACCURATE: LG routes ACR through a company called Alphonso Alphonso is a technology firm that manages LG Ad Solutions.
PARTIALLY INACCURATE — Frequency: The video claims TVs take screenshots "7,200 times per hour." This appears to derive from Samsung's 500-millisecond capture interval (two per second × 3,600 seconds = 7,200). However, as researchers note, ACR systems send hashed fingerprints — not literal screenshots — to servers. Samsung transmits data packets roughly once per minute; LG transmits every 15 seconds. The "7,200 screenshots per hour" framing is technically arguable but misleadingly visual.
INACCURATE — UCL attribution: The video credits the 2024 study exclusively to "University College London." In fact, the study was a joint effort by UCL, Universidad Carlos III de Madrid (Spain), and the University of California, Davis.
INACCURATE — Opting out: The video claims "turning off one tracking feature doesn't stop everything" and implies opt-out is ineffective. The UCL study actually found that opting out of ACR does halt ACR-specific network traffic to ACR servers. However, other tracking systems on the TV (app analytics, ad-ID tracking, voice data) continue independently, which is the valid concern.
INACCURATE — Netflix tracking: The video implies that all content, including third-party streaming services, is captured. The UCL study found that Netflix and other third-party streaming services were not captured by ACR in the U.S., apparently due to copyright restrictions.
INACCURATE — Vizio timing: The video states Vizio "was one of the first companies to get caught" in 2021. The FTC action against Vizio was settled in 2017, not 2021. The 2021 reference may conflate with Vizio's 2021 IPO, at which point the company's data revenue model became more publicly discussed.
UNVERIFIED — Political and health data: The claim that advertisers build profiles including political views" and "health interests" from TV viewing data is plausible and consistent with how data brokers describe their products, but the video presents it as established fact without specific documentation.
What You Can Do
Consumer Reports' testing and analysis of current smart TV models suggests the following hierarchy of protective measures, ordered from most to least effective:
1. Do not connect the TV to the internet. Using the television as a "dumb" display and routing all content through an external streaming device (Apple TV, Roku, Amazon Fire Stick) with its own privacy settings eliminates ACR data collection. This is the most reliable option but sacrifices built-in smart features.
2. Block the TV at the router level. Advanced users can block the TV's MAC address from accessing the internet at the router, or use a Pi-hole DNS sinkhole to block known ACR server domains. This requires technical comfort but permits use of HDMI inputs without network exposure.
3. Opt out of ACR during setup — and verify. When setting up a new TV, decline all data-sharing prompts. Then navigate into Settings to confirm ACR (labeled variously as "Viewing Information Services," "Live Plus," "SambaTV," or "Smart Interactivity") is disabled. The UCL study found that opt-out does stop ACR-specific transmissions, so this step has real value — but it must be done correctly.
4. Review and disable related settings. Separately disable: advertising ID tracking, interest-based advertising, voice data collection, and any analytics or "personalization" settings. These operate independently of ACR.
5. Check Consumer Reports' Smart TV Privacy Guide. Consumer Reports publishes and regularly updates step-by-step opt-out instructions for every major TV brand and platform at consumerreports.org.
The Road Ahead
No comprehensive federal smart TV privacy legislation has been enacted in the United States. The Video Privacy Protection Act — originally passed in 1988 to protect videotape rental records — is being tested in the New York class-action against Samsung as a potential statutory hook, but its applicability to ACR has not been adjudicated.
The Texas enforcement actions are being watched closely by privacy practitioners in other states. The Texas Deceptive Trade Practices Act has already produced billion-dollar settlements against Meta and Google; if Paxton achieves similar results against TV manufacturers, copycat actions in other states are likely. California, which has its own comprehensive consumer privacy law (CCPA/CPRA), may prove another litigation venue.
In the European Union, GDPR's opt-in consent requirements provide stronger protections than current U.S. law, but ACR remains deployed on European smart TVs. The UK Information Commissioner's Office visited UCL's IoT Laboratory during the 2024 study's data collection phase and has been developing consumer IoT guidance.
The fundamental business model pressure shows no sign of abating. TV manufacturers are investing in AI-enhanced audience analytics — systems that promise advertisers deeper behavioral predictions from viewing data — which will intensify both the data-collection incentive and the privacy stakes for consumers.
SIDEBAR
It's Really Just a Laptop:
The Case for Buying a Monitor and Separate Components Instead of a Smart TV
There is a counterintuitive way to escape smart TV surveillance entirely, one that gets cleaner the more you think about it: stop buying televisions.
Buy a monitor instead. Add a network TV tuner. Add an external streaming box. What you end up with is, as one observer put it bluntly, essentially a laptop connected to a large screen — which is, stripped of marketing language, exactly what a smart TV already is. The only difference is who controls the computer inside it.
THE UPGRADE ECONOMICS ARGUMENT
The strongest practical case for the modular approach is not privacy — it is money over time.
A smart TV bundles a display panel, which has a useful life of 10 to 15 years, with a streaming compute platform, which has a useful life of 3 to 5 years before manufacturers stop pushing software updates. When the platform ages out — when Roku or Fire TV OS pushes a major update the hardware cannot support, when a new codec standard emerges, when a streaming service drops support for an older platform version — your only options are to live with the degraded experience or replace the entire television.
The modular architecture decouples those two investments and prices them accordingly. The streaming brain — an Apple TV 4K, a Roku, an Amazon Fire TV stick — costs $50 to $130 and gets replaced on its own lifecycle, independently of the display. You are not buying a new 65-inch panel because Roku released a new version. You are buying a $130 box.
"Nobody would buy a laptop where Dell or HP had soldered in a proprietary browser that tracked everything you watched and required you to buy an entirely new laptop when the OS became obsolete. The television industry normalized exactly that model, dressed it up with the word 'smart,' and consumers accepted it."
THE ATSC 3.0 COMPLICATION
Over-the-air television — the ability to receive local broadcast channels free via antenna — has historically been the one feature that justified buying a smart TV over an external box. External streaming devices do not include TV tuners.
That calculus is shifting, for two reasons.
First, the cost argument is weakening. ATSC 3.0, the new NextGen TV broadcast standard, introduces Digital Rights Management encryption managed by a private industry consortium called the ATSC 3.0 Security Authority (A3SA). Opponents of the encryption regime have told the FCC that DRM certification requirements could add $80 to $156 to the cost of ATSC 3.0-capable sets. LG has already stopped including ATSC 3.0 tuners in its new televisions entirely, citing a patent dispute.
Second, a network tuner solves the OTA problem externally. Devices such as the SiliconDust HDHomeRun Flex 4K connect to a home router via Ethernet, receive both ATSC 1.0 and unencrypted ATSC 3.0 signals from a standard antenna, and stream live television to any device on the home network simultaneously — the monitor in the living room, a tablet in the kitchen, a laptop upstairs. The tuner costs approximately $200. Where ATSC 3.0 channels are encrypted and the tuner cannot decrypt them, it automatically falls back to the ATSC 1.0 version of the same channel, which is what most built-in smart TV tuners would deliver anyway.
There is a further privacy dimension to ATSC 3.0 that has received little public attention. Unlike ATSC 1.0, which was a purely one-way broadcast standard, ATSC 3.0 is architected around internet connectivity and includes a return-path data capability. Public advocacy groups have filed formal comments at the FCC warning that broadcasters could use this return path to collect viewing data — creating an ACR-like surveillance layer at the broadcast signal level, independent of anything the television manufacturer's operating system is doing.
THE PRIVACY LEDGER
External streaming boxes are not uniformly private, but they are meaningfully better than smart TV platforms. Apple TV 4K has no Automated Content Recognition technology at all — Consumer Reports explicitly identifies it as the privacy-leading streaming device currently available. Roku and Amazon Fire TV collect viewing and usage data but do so under their own privacy frameworks, independently of whatever surveillance the TV manufacturer's OS would conduct.
The practical result of the modular setup: ACR surveillance from the television manufacturer is eliminated entirely because the TV is never connected to the internet. Streaming platform data collection is limited to whichever external device you choose and can be managed through that device's settings. OTA viewing data from the HDHomeRun stays on your local network and is not transmitted to manufacturer servers.
COST COMPARISON
The modular path costs more upfront. Over a 10-year display lifecycle, the upgrade economics typically reverse, and the privacy benefit is constant from day one.
THE BOTTOM LINE
The smart TV industry persuaded consumers to accept a bundle that serves manufacturer interests — perpetual data collection and a platform lock-in that monetizes the living-room screen — rather than consumer interests. The modular alternative is not new technology. It is simply the architecture that the computing industry has always used: a durable display, a replaceable computer, and the user in control of both.
As one analyst observed after walking through the comparison: the bundle you end up with is essentially a laptop connected to a large screen. Which is exactly what a smart TV already is. The question is only who owns the computer inside it.
RECOMMENDED MODULAR SETUP
Display: 42–55" monitor or commercial display panel with HDMI 2.1 inputs and no built-in smart OS — or a smart TV kept offline.
OTA Tuner: SiliconDust HDHomeRun Flex 4K (~$200). Connects via Ethernet. Streams to all devices on your network. Handles ATSC 1.0 and unencrypted ATSC 3.0.
Antenna: Any quality UHF/VHF antenna appropriate for your distance from broadcast towers. The antenna does not need to be "ATSC 3.0 compatible" — that label applies to the tuner, not the antenna.
Streaming Box: Apple TV 4K (~$130) for best privacy (no ACR). Roku or Amazon Fire TV are acceptable alternatives with more limited data practices than built-in smart TV platforms.
DVR (optional): HDHomeRun supports whole-home DVR via an attached USB drive with a paid TV guide subscription. ZapperBox M1 (~$250) is a standalone ATSC 3.0 DVR alternative with broader encrypted-channel support.
Note: Monitor the FCC's ongoing ATSC 3.0 DRM rulemaking proceeding (Docket 16-142) before making a major purchase decision. The simulcast requirement — which forces stations to broadcast in both ATSC 1.0 and 3.0 — is currently under consideration for elimination, with Phase 1 sunsetting of ATSC 1.0 proposed for top markets as early as February 2028.
Sidebar: ACR, HDMI, Blu-ray, and Router Blocking — What the Research Actually Shows
1. Does ACR capture your work when using the TV as an HDMI monitor?
Yes — and this is one of the most alarming findings of the 2024 peer-reviewed study. The UCL/UC Davis/UC3M researchers explicitly tested the scenario of using a smart TV as a "dumb" external display via HDMI. Their finding: ACR network traffic was present in that scenario. As lead researcher Patricia Callejo emphasized, smart TV platforms collect large volumes of data "regardless of how they consume content — whether through traditional TV viewing or devices connected via HDMI, like laptops or gaming consoles."
However — and this is technically important — the TV's ACR system is not grabbing a raw screenshot of your Word document or spreadsheet and transmitting it. ACR periodically captures frames, builds a fingerprint (essentially a hash) of the content, and shares it with an ACR server for matching against a database of known content — movies, ads, live feed, etc. What this means practically: if a fingerprint of your screen doesn't match anything in the content database (i.e., your custom work documents, original spreadsheets, personal writing), it simply fails to match and no identification is returned. Your proprietary work content is not being read or sent in recognizable form.
What IS at risk: if you have a video playing on your laptop — a training video, a YouTube clip, a streaming show, a Blu-ray — and it's displaying through the TV's HDMI input, that content CAN be fingerprinted and identified if it exists in the ACR database. The researchers also note that the privacy implications extend to work presentations, websites you visit, and home videos — content that could potentially be fingerprinted and analyzed, though matched identification is only possible against content in the reference library.
Bottom line on HDMI/computer use: Turn off ACR (see below) or don't connect the TV to the internet if you're using it as a work monitor. The risk isn't that your classified documents are being read — it's that the TV is actively sampling your screen every 500ms (Samsung) or 10ms (LG) and sending fingerprints to external servers, and you simply don't know what the full database of "known content" actually contains.
2. Does ACR capture Blu-ray content?
The UC Davis study found that ACR on U.S.-sold TVs was capturing linear TV, FAST channels, and content shared over HDMI connections, but not OTT (over-the-top) streaming content from services like Netflix or Prime Video. The reason for the streaming service exemption is contractual — those services have their own measurement deals and restrict manufacturers from fingerprinting their content.
Blu-ray is a different matter. A Blu-ray player connected via HDMI is equivalent to any other HDMI source from the TV's perspective. Researchers flagged that when ACR captures and fingerprints copyrighted content from physical media like Blu-ray discs without authorization from the copyright holder, it potentially raises intellectual property concerns. Whether the manufacturer's ACR database actually contains Blu-ray movie fingerprints (to enable a match) is not fully documented publicly, but the fingerprinting attempt itself is occurring.
3. The LG Opt-Out App Problem — Is It Real?
This is a real and important nuance that the viral video conflated with the ACR opt-out. Here's the precise distinction:
On LG webOS, there are two distinct categories of agreements: required agreements that enable core smart TV services (app store, software updates, LG Content Store access), and optional consents related to data-sharing features like personalization, advertising, and viewing information (ACR/Live Plus). The TV can still function, but the experience changes depending on which items you decline.
The reports you may have seen about apps not working are real — but they're about the required User Agreements, not the ACR/Live Plus toggle. LG's own support documentation states: "In order to use the Smart TV, you must have an internet connection and agree to the User Agreements." If you decline the mandatory baseline terms (which cover LG Content Store, the app ecosystem, and basic smart services), LG does in fact lock you out of apps. This is a form of forced bundling and is part of what the Texas AG lawsuits challenge.
The ACR/Live Plus toggle is separate and can be turned off without losing apps:
- Go to Settings → General → System → Additional Settings → Live Plus and toggle it off
- Also go to Settings → Support → Privacy & Terms → User Agreements and specifically opt out of Viewing Information, Interest-Based Advertising, and Voice Information individually
Consumer Reports' own 2025 testing confirmed that on LG TVs, these optional consents — Viewing Information, Voice Information, Interest-Based Cross-Device Advertising — are all off by default during setup, though users can enable them all with a single "Select All" tap. The problem occurs when people decline all prompts during setup without realizing they're declining both the required baseline agreements and the optional tracking consents simultaneously.
4. How to Block the TV at the Router — With Scripts
There are several approaches, ranging from simple to sophisticated. Your router's capability determines which method applies.
Method A: Consumer Router UI (simplest — no scripting required)
Most home routers (ASUS, Netgear, TP-Link, Eero, etc.) have a MAC address filtering feature in the admin web interface. Find your TV's MAC address (on the TV: Settings → General → Network → Wi-Fi Connection → the MAC address is listed there, or on a label on the back). Then in your router's admin page, add the TV's MAC to a "block" or "deny" list. This is the no-code option.
Method B: Static IP + Firewall Rule (router running Linux/OpenWRT/DD-WRT/ASUS Merlin)
If your router runs Linux-based firmware, you can assign the TV a static DHCP lease and block it with iptables. Here's a complete, commented script:
#!/bin/sh
# block_smart_tv.sh
# Blocks a smart TV from internet access while allowing local LAN communication
# Replace TV_MAC and TV_IP with your TV's actual values
# Run on router with iptables support (OpenWRT, DD-WRT, ASUS Merlin, etc.)
TV_MAC="AA:BB:CC:DD:EE:FF" # Your TV's MAC address
TV_IP="192.168.1.150" # Assign this as a static DHCP lease in router settings first
# Drop all forwarded packets from the TV to the WAN (blocks internet, keeps LAN)
iptables -I FORWARD -m mac --mac-source $TV_MAC -o eth0 -j DROP
# Alternative: block by IP if MAC filtering isn't available on your router
# iptables -I FORWARD -s $TV_IP -o eth0 -j DROP
# Optional: also block DNS queries from the TV (prevents domain lookups)
iptables -I FORWARD -m mac --mac-source $TV_MAC -p udp --dport 53 -j DROP
iptables -I FORWARD -m mac --mac-source $TV_MAC -p tcp --dport 53 -j DROP
echo "Smart TV internet access blocked for MAC: $TV_MAC"
Important note on that script: The -o eth0 flag should be replaced with whatever your WAN interface is called. On some routers it's eth0, on others wan, ppp0, or vlan2. Check with ip link show or ifconfig on your router's SSH shell. Also, iptables rules don't survive a reboot by default — to make them persistent on OpenWRT, add them to /etc/firewall.user; on ASUS Merlin, add to /jffs/scripts/firewall-start.
Method C: Pi-hole DNS Blocking (most surgical — blocks ACR domains, keeps apps working)
This is arguably the best solution for your situation — it blocks the specific ACR tracking servers while allowing the TV's apps and streaming services to continue working. Pi-hole runs on a Raspberry Pi (or in a Docker container) and acts as your network's DNS server.
Known LG ACR (Alphonso) domains to block:
alphonso.tv
eu-acr1.alphonso.tv
eu-acr2.alphonso.tv
us-acr1.alphonso.tv
samba.tv # SambaTV ACR (Sony, TCL, others)
data.samba.tv
Known Samsung ACR domains to block:
samsungacr.com
cdn.samsungacr.com
wba.samsung.com
log-config.samsungacr.com
Add these to Pi-hole's blocklist (under Settings → Blocklists, or via the admin interface → Domains → Add to Blacklist). All other traffic — Netflix, YouTube, firmware updates — continues normally. This is surgically effective and doesn't break any apps.
Method D: VLAN Isolation (most robust)
If your router supports VLANs (most enterprise-grade home routers like Ubiquiti, pfSense, or ASUS with Merlin firmware do), put the TV on its own VLAN with no internet routing. It can still receive your Blu-ray or HDMI input locally; it just can't phone home. This is the gold standard but requires the most technical setup.
Summary Table
| Scenario | ACR Active? | What's at Risk |
|---|---|---|
| TV tuner / broadcast antenna | Yes | Full identification |
| Blu-ray via HDMI | Yes (fingerprinting attempt) | Content ID if in database |
| Laptop work docs via HDMI | Yes (fingerprinting attempt) | Low match risk but data still sent |
| Laptop video via HDMI | Yes | Full identification if content in database |
| Netflix / Prime streaming app | No (US) | Protected by contractual agreement |
| ACR opted out in settings | No (ACR stops) | Other tracking systems still active |
| TV blocked at router/Pi-hole | No | No data leaves the network |
The cleanest solution for your use case — Blu-ray viewing and using the TV as a computer monitor — is Pi-hole DNS blocking targeting the known ACR domains. It stops the surveillance without killing any of the TV's other network functions.
Verified Sources and Formal Citations
[1] Anselmi, G., Vekaria, Y., D'Souza, A., Callejo, P., Mandalari, A.M., & Shafiq, Z. (2024). Watching TV with the Second-Party: A First Look at Automatic Content Recognition Tracking in Smart TVs. Proceedings of the 2024 ACM Internet Measurement Conference (IMC '24). doi:10.1145/3646547.3689013. https://arxiv.org/abs/2409.06203
[2] UCL News (November 2024). Smart TV tracking raises privacy concerns. University College London. https://www.ucl.ac.uk/news/2024/nov/smart-tv-tracking-raises-privacy-concerns
[3] TechXplore (December 10, 2024). Smart TVs collect viewing data even when used as external screens, according to research. https://techxplore.com/news/2024-12-smart-tvs-viewing-external-screens.html
[4] International Association of Privacy Professionals (IAPP) (2025). Automated content recognition technology takes privacy enforcement spotlight. https://iapp.org/news/a/automated-content-recognition-technology-takes-privacy-enforcement-spotlight
[5] FlatpanelsHD (2025). Five TV makers sued for taking screenshots of everything you watch. https://www.flatpanelshd.com/news.php?subaction=showfull&id=1768911145
[6] Top Class Actions / allaboutlawyer.com (January 2026). Samsung Class Action Alleges TVs Illegally Track Viewing Data To Sell For Profit. https://allaboutlawyer.com/samsung-class-action-alleges-tvs-illegally-track-viewing-data-to-sell-for-profit-millions-of-smart-tv-owners-affected-no-consent-required/
[7] Federal Trade Commission (February 6, 2017). VIZIO to Pay $2.2 Million to FTC, State of New Jersey to Settle Charges It Collected Viewing Histories on 11 Million Smart Televisions without Users' Consent. https://www.ftc.gov/news-events/news/press-releases/2017/02/vizio-pay-22-million-ftc-state-new-jersey-settle-charges-it-collected-viewing-histories-11-million
[8] Federal Trade Commission. VIZIO, INC. and VIZIO Inscape Services, LLC — Case Proceedings. https://www.ftc.gov/legal-library/browse/cases-proceedings/162-3024-vizio-inc-vizio-inscape-services-llc
[9] Vizio, Inc. (October 2018). VIZIO Nears Resolution of Pending Privacy Class-Action Proceedings. https://www.vizio.com/en/press/2018/oct/vizio-nears-resolution-of-pending-privacy-class-action-proceedings
[10] Vizio, Inc. (February 6, 2017). VIZIO Announces Statement on FTC Resolution. https://www.vizio.com/en/press/2017/feb/vizio-announces-ftc-resolution
[11] Consumer Reports (2025). How to Turn Off Smart TV Snooping Features. https://www.consumerreports.org/electronics/privacy/how-to-turn-off-smart-tv-snooping-features-a4840102036/
[12] Lobato, R. (2025). Automated content recognition (ACR), smart TVs, and ad-tech infrastructure. Convergence: The International Journal of Research into New Media Technologies. doi:10.1177/13548565251327885. https://journals.sagepub.com/doi/10.1177/13548565251327885
[13] Wikipedia. Automatic Content Recognition. (Continuously updated.) https://en.wikipedia.org/wiki/Automatic_content_recognition
[14] CaptainCompliance.com (December 2025). Privacy Alert: How Automated Content Recognition (ACR) Is Watching Everything You Watch. https://captaincompliance.com/education/privacy-alert-how-automated-content-recognition-acr-is-watching-everything-you-watch/
[15] State of Surveillance (December 2, 2025). Smart TV Surveillance 2025: Screenshots Every 10ms. https://stateofsurveillance.org/articles/surveillance/smart-tv-surveillance-acr/
[16] Cybersecurity News (October 8, 2024). Your Smart TVs Tracking Your Viewing Habits Using ACR technology. https://cybersecuritynews.com/your-smart-tvs-tracking-you/
[17] Davis Wright Tremaine / Media Law Monitor (2017). The Real Takeaway From VIZIO's Privacy FTC Settlement. https://www.dwt.com/blogs/media-law-monitor/2017/10/the-real-takeaway-from-vizios-privacy-ftc-settleme
[18] Patel, N. / The Verge (January 7, 2019). Interview with Vizio CEO Bill Baxter [The Vergecast]. Includes CEO acknowledgment of data revenue model. https://www.theverge.com/2019/1/7/18172397/airplay-2-homekit-vizio-tv-bill-baxter-interview-vergecast-ces-2019
[19] GitHub — SafeNetIoT/ACR (2024). Automated Infrastructure to detect, observe, and analyze ACR Tracking in Smart TVs. https://github.com/SafeNetIoT/ACR
[20] SambaTV (2024). Company overview — 40 million devices statistic. Referenced in Lobato (2025). https://samba.tv
This report was prepared using peer-reviewed academic research, primary government documents, court filings, and major technology news sources. All claims have been independently checked against primary sources. Consumer Reports-style fact-based consumer advocacy standards were applied throughout.
Comments
Post a Comment