Court Narrows Roku Privacy Suit to Children's Data Claims

A U.S. District Court dismissed most privacy claims against Roku, leaving only COPPA claims.

The U.S. District Court for the Eastern District of Michigan has issued a critical ruling in the state's privacy lawsuit against Roku, significantly narrowing the case. Filed on April 29, 2025, by Michigan Attorney General Dana Nessel, the lawsuit accused Roku of violating multiple privacy laws, including the Children's Online Privacy Protection Act (COPPA), the Video Privacy Protection Act (VPPA), and several state statutes.

Judge Stephen J. Murphy III dismissed all claims except those under COPPA, citing a lack of standing under VPPA and state laws. In legal terms, "standing" refers to the ability of a party to demonstrate an adequate connection to the law being challenged. Michigan failed to adequately prove their qualification to bring the case under the dismissed statutes, but the court noted that COPPA specifically allows state attorneys general to take enforcement action.

This decision means the legal focus will now be on allegations that Roku collected and mishandled children's data in violation of COPPA. While Roku denies any wrongdoing, this ruling underscores the unique role of COPPA amongst privacy laws, empowering state attorneys general to protect children's privacy online.

For general counsels, the ruling signals a need to prioritize compliance with COPPA over other privacy laws that might have more complex standing requirements. Similar legal battles, such as those seen in California and Florida, highlight the growing scrutiny tech companies face concerning children's data privacy.