Florida Sues Netflix, Alleging It Tracked Children After Promising an Ad-Free Service

Florida Attorney General James Uthmeier has sued Netflix, alleging the streaming company tracked what children watched and shared that data with advertisers during years in which it marketed itself to subscribers as an ad-free service that did not collect or sell their information. The 66-page complaint was filed last week in Florida's Seventh Judicial Circuit and represents the most significant consumer privacy action the state has brought against a streaming platform.

The core allegation is one of timing. According to the complaint, Netflix built out a behavioral data operation well before it launched its advertising-supported subscription tier in November 2022, meaning that subscribers who paid specifically to avoid advertising were nonetheless generating data that fed an advertising apparatus. The state alleges that children's viewing profiles were part of that data flow.

The case lands in a state that has moved aggressively on technology enforcement. Uthmeier's office sued OpenAI earlier this year, seeking to hold its chief executive personally liable, and has defended Florida's social media age restrictions in federal court. The Netflix action extends that posture from artificial intelligence and social platforms into streaming video, a category most Florida families use daily.

What the complaint alleges

The state's theory rests on the gap between what Netflix told subscribers and what the company allegedly did with viewing data. For most of its history, Netflix marketed a straightforward proposition: a monthly fee in exchange for content, with no advertising and, by implication, no advertising-driven data collection.

The complaint alleges that Netflix nonetheless assembled detailed behavioral profiles from viewing activity, including activity on profiles designated for children, and that data from those profiles was disclosed to advertisers or advertising intermediaries. Under Florida's deceptive and unfair trade practices framework, a company's public representations about its own conduct are themselves actionable when they diverge from the underlying practice.

Children's data receives distinct treatment in the complaint. Federal law under the Children's Online Privacy Protection Act imposes specific requirements on the collection of personal information from children under 13, and Florida has enacted its own provisions aimed at protecting minors online. A streaming service that offers dedicated children's profiles and content ratings is on notice that some of its users are minors.

In announcing the suit, Uthmeier framed the case around parental authority, arguing that parents rather than technology companies should control the privacy of their children. That framing is consistent with how his office has presented its other technology enforcement actions and reflects the political coalition behind Florida's recent online child safety legislation.

Why Florida is bringing the case

State attorneys general have become the primary enforcers of consumer privacy in the United States, largely because Congress has not passed a comprehensive federal privacy statute. In the absence of federal preemption, states have used their general consumer protection powers, which typically prohibit unfair or deceptive acts, to reach practices that no privacy-specific statute clearly addresses.

Florida has an additional tool. The Florida Digital Bill of Rights, which took effect in 2024, imposes obligations on large technology companies operating in the state and gives the attorney general enforcement authority. It applies to companies above revenue thresholds and includes provisions governing the sale of personal data and the treatment of information belonging to minors.

The venue matters as well. The case was filed in state circuit court rather than federal court, which keeps it in a Florida forum applying Florida law. Defendants in cases of this type frequently seek removal to federal court, and whether the case stays where it was filed will be one of the first procedural questions.

Florida is not alone in this area. Streaming and connected television data practices have drawn scrutiny from multiple state enforcers and from private plaintiffs under the federal Video Privacy Protection Act, a statute originally written for video rental records that has found new life in the streaming era.

The Florida context

Florida has spent the past three years building a legal framework aimed at the intersection of minors and technology. The Legislature passed restrictions on social media accounts for younger teenagers, adopted age verification requirements for certain online content, and created the Digital Bill of Rights. Several of those measures have faced First Amendment challenges, with mixed results.

The Netflix case is legally distinct from those fights. A deceptive trade practices claim about what a company told its own paying customers does not raise the same constitutional questions as a statute restricting who may access speech online. That makes this case a cleaner enforcement vehicle, and it may be part of why the state chose it.

For Florida households, the practical stakes are about what a subscription purchase actually buys. A substantial number of Florida families pay for streaming services specifically to avoid advertising aimed at children. If the state's allegations hold up, those families were paying a premium for a promise that was not being kept.

Florida also has a sizable connected television advertising market, concentrated in the Tampa, Orlando and Miami metropolitan areas, which are among the largest media markets in the country. Advertising data practices in streaming are not an abstraction for the state's economy.

How streaming data actually moves

Understanding the allegation requires understanding how viewing data becomes advertising data, a pipeline most subscribers never see.

A streaming service records what each profile watches, when, for how long, what was abandoned partway through and what was rewatched. That information has obvious uses inside the service, powering recommendations and informing decisions about what content to license or produce. Nobody disputes that a streaming platform collects it.

The question is what happens next. Viewing behavior can be converted into audience segments, categories describing inferred attributes such as household composition, interests or purchasing propensity. Those segments have commercial value to advertisers, and they can be shared with advertising technology intermediaries, matched against identifiers from other sources and used to target advertising on entirely different platforms.

Children's viewing data is particularly sensitive in that pipeline because a children's profile is a strong signal that a household includes a child of a particular age range. That inference is commercially valuable and is precisely what child privacy law is designed to restrict.

The state's allegation is that this pipeline was operating during a period when Netflix's public marketing described a service that did not collect or share subscriber information for advertising purposes. If that timeline is accurate, the deception claim follows from the gap.

Florida's other technology cases

The Netflix suit fits into a pattern that has made Florida's attorney general one of the more active state technology enforcers in the country.

In June, the office filed what was described as a first-of-its-kind state lawsuit against OpenAI, seeking to hold its chief executive personally liable for alleged harms. Naming an individual executive is unusual in a state consumer protection action and signaled an aggressive posture.

The office has also defended Florida's social media age restriction law in federal litigation brought by industry trade associations, a case that reached the appellate courts on First Amendment grounds. That litigation tests whether a state may restrict minors' access to social media platforms, a question with implications well beyond Florida.

Consumer protection enforcement, by contrast, operates on much older and more settled legal ground. A claim that a company said one thing and did another is a traditional deception theory, and it does not require a court to resolve novel constitutional questions about speech and access. That difference in legal posture may matter more to the outcome than the technology involved.

What it means for Floridians

Consumer protection suits brought by a state attorney general typically seek injunctive relief, civil penalties and sometimes restitution. Individual subscribers do not automatically receive payments, and any monetary recovery would be structured through the eventual resolution of the case.

The more immediate effect for Florida families may be disclosure. Litigation of this kind produces documents, and the discovery process in a case alleging specific data flows tends to surface internal records describing how the data was actually handled. That record becomes public in a way that privacy policies never are.

Parents who want to limit data collection on streaming services have some options today, independent of the litigation. Most platforms allow users to turn off personalized recommendations and advertising preferences within account settings, and connected television devices have their own tracking settings that operate separately from the streaming application. Disabling advertising identifiers at the device level affects every application on that device.

How Netflix is likely to respond

Netflix has not conceded the allegations, and companies in this position typically raise several defenses. The first is that the conduct described falls within disclosed privacy policy terms that subscribers accepted. The second is that data shared with advertising partners was aggregated or de-identified in ways that fall outside the statutory definition of personal information. The third is federal preemption, arguing that COPPA occupies the field with respect to children's data.

Each of those defenses has been litigated elsewhere with varying outcomes. The de-identification argument in particular has weakened in recent years as researchers have demonstrated how readily supposedly anonymous behavioral data can be re-linked to individuals.

There is also a procedural path that resolves most cases of this type without a trial. State attorney general consumer protection actions against large technology companies frequently end in negotiated settlements involving monetary payments and binding commitments about future conduct.

What's next

Netflix will file a response, likely including motions to dismiss and possibly an attempt to move the case to federal court. Those threshold questions typically take months to resolve, and a case filed in September 2026 would not reach trial for a considerable time even on an aggressive schedule.

Other states will be watching. When one attorney general files a detailed complaint against a major platform, peer states often follow with parallel actions or join multistate investigations. The Florida complaint's factual allegations are now a public roadmap for any enforcer considering the same theory.

For Florida families, the near-term takeaway is practical rather than legal. Whatever the courts eventually decide about Netflix, the case is a reminder that a paid subscription and a privacy guarantee are not the same thing, and that the settings menu is where most of the meaningful control actually lives.