Kentucky Just Made It Illegal for Your Smart TV to Spy on You Without Asking

Your smart TV is watching you watch it. Every time you stream a show, flip channels, or even leave the TV on in the background, a technology called automatic content recognition is taking screenshots of your screen and comparing them against a database to identify exactly what you are watching. This data is sold to advertisers, shared with data brokers, and used to build detailed profiles of your household's media consumption.

On March 16, 2026, Kentucky's House of Representatives unanimously passed HB 692, a bill that would require manufacturers to get your explicit consent before collecting this data. If signed into law, it would take effect July 1, 2027.

What ACR Actually Does

Automatic content recognition works by capturing small samples of what is displayed on your screen, typically every few seconds, and matching those samples against a reference database. It can identify TV shows, movies, commercials, video games, and even content from streaming apps. The technology operates at the firmware level, which means it runs regardless of which input or app you are using.

As we previously reported when examining how Samsung TVs take a screenshot every half second to track your viewing habits, ACR creates what Representative Josh Branscum called "a digital fingerprint with each use." That fingerprint is then used for targeted advertising, content recommendations, and audience measurement, all without most consumers realizing it is happening.

The FTC has previously taken enforcement action against smart TV manufacturers for inadequate ACR disclosure. In one notable case, Vizio paid $2.2 million for tracking 11 million TVs without meaningful consent. But enforcement has been sporadic and penalties have been too small to change industry behavior.

What HB 692 Changes

The bill amends Kentucky's Consumer Data Protection Act to classify ACR data as "sensitive data." This is a meaningful legal distinction because sensitive data under the Kentucky CDPA requires opt in consent, not the weaker opt out model used for most consumer data. Here is what that means in practice:

• Opt in consent required. Companies must ask before collecting ACR data, not bury a toggle in a settings menu that defaults to "on."
• Purpose limitation. ACR data can only be used for the specific purposes disclosed at the time of consent.
• Enhanced security. Companies must implement stronger data protection measures for ACR data than for ordinary consumer data.
• Data protection assessments. Any company processing ACR data must conduct and document formal risk assessments.

The bill defines both "automatic content recognition" and "smart monitor" in statute, closing a gap that manufacturers have exploited by arguing their devices do not technically qualify as "televisions" under existing privacy frameworks.

Why This Matters for Privacy Law

Kentucky is not the first state to address smart device privacy, but HB 692 takes a different approach than most. Rather than creating a standalone smart TV law, it integrates ACR protections into the state's existing comprehensive privacy framework. This means enforcement, penalties, and consumer rights all plug into an already functioning legal infrastructure.

The unanimous House vote is also notable. Privacy legislation rarely gets bipartisan consensus. The fact that HB 692 passed without opposition suggests that smart TV tracking has become a topic where both parties see political benefit in protecting consumers, a shift from even two years ago when similar bills stalled in committee.

Kentucky's move comes alongside broader state privacy activity this month. Alabama's comprehensive privacy bill passed 104-0 in its House. Hawaii's Senate passed a bill banning the sale of geolocation and browser data without consent. The wave of state privacy laws taking effect in 2026 is creating a patchwork that increasingly resembles federal regulation without the federal part.

The Ad Tech Connection

ACR data is one of the most valuable signals in the advertising ecosystem. It bridges the gap between what you watch on your TV and what ads you see on your phone, laptop, and other devices. Data brokers aggregate ACR data with browsing history, purchase records, and location data to build cross device profiles that follow you everywhere.

If HB 692 becomes law and similar bills follow in other states, it could meaningfully disrupt this data pipeline. Opt in consent for ACR data would dramatically reduce the volume of viewing data available for ad targeting, since most consumers would likely decline if clearly asked. This is exactly what happened when Apple introduced App Tracking Transparency on iOS: opt in rates hovered around 25%, devastating the mobile ad tracking ecosystem.

For compliance teams at TV manufacturers and ad tech companies, the signal is clear: the 2026 privacy laws are systematically dismantling ad surveillance one data type at a time.

What You Can Do Now

You do not need to wait for HB 692 to become law to protect yourself from ACR tracking:

• Check your TV's settings. Most smart TVs have an ACR toggle buried in privacy or advertising settings. On Samsung, look for "Viewing Information Services." On LG, check "Live Plus." On Vizio, find "Viewing Data."
• Disconnect from the internet. If you use an external streaming device like a Roku or Apple TV, you can disconnect the TV itself from Wi-Fi and use it purely as a display.
• Opt out of personalized ads. Even with ACR disabled, your TV may share data through other channels. Disable personalized advertising in your TV's settings.
• Use a Pi-hole or DNS filter. Many ACR systems phone home to specific domains. A network level ad blocker can prevent this traffic from leaving your home.

What Happens Next

HB 692 now moves to the Kentucky State Senate. Given the unanimous House vote, passage seems likely, but industry lobbying often intensifies in the upper chamber. If signed by the governor, the law takes effect July 1, 2027, giving manufacturers roughly a year to implement consent mechanisms.

Privacy advocates should watch for similar bills in other states. The combination of FTC enforcement precedent, growing consumer awareness, and now state legislative action creates a regulatory trajectory that smart TV manufacturers cannot ignore. The era of silent TV surveillance may be ending, one state at a time.