Cathy Mulrow-Peattie Comments on Florida AG’s Roku Privacy Lawsuit and Scope of the Florida Digital Bill of Rights

Hinshaw partner Cathy Mulrow-Peattie was quoted in a recent Privacy Daily article analyzing the lawsuit filed by Florida AG James Uthmeier against Roku under the state’s Digital Bill of Rights. The lawsuit alleges improper collection, sale, and re-identification of children’s sensitive personal data.

This enforcement action has sparked debate among privacy practitioners over the law’s narrow applicability thresholds and its place among state privacy frameworks. The lawsuit also signals an assertive position by the Florida Attorney General in the children’s privacy space and highlights the significant legal penalties at stake.

Cathy emphasized this expanding range of enforcement, noting that state attorneys general across the United States are leveraging consumer protection and privacy statutes to prevent the collection, use, and sharing of sensitive data without consent, particularly data involving children and data broker ecosystems:

“[The complaint against Roku] is another example of [how] state attorneys general across the U.S. are leveraging their entire regulatory toolbox, including consumer protection and privacy laws, to prevent the collection, use, and sharing of sensitive data without consent, especially as it relates to children’s personal information and data shared with data brokers.”

She also underscored the bipartisan momentum behind enhanced privacy enforcement and urged businesses to review their privacy practices and notices to assess applicable thresholds and compliance obligations under state privacy laws:

“Businesses should be reviewing their privacy practices and notices to see how these laws apply to them and if they meet the applicable thresholds under the state privacy laws where they are processing consumer personal information. And that includes Florida.”

• Privacy Daily: “Florida Suit Citing Downplayed Privacy Law Raises Eyebrows” (October 21, 2025)