Florida sues Netflix: the ad-free plan logged every pause and rewind
Photo: Иллюстрация vpnlab.io, логотип - Netflix, Inc. / Public domain
Florida's attorney general has sued Netflix over the promise that made its paid tier worth paying for. The 66-page complaint argues that while Netflix told families a subscription bought them an escape from advertising surveillance, it was recording billions of behavioural events, including on the profiles it markets as being for children, and later turned that material into an advertising business.
In short
- The state alleges deceptive practice: Netflix said the paid service did not collect or sell data, then built an ad business on what it had collected.
- Kids profiles are at the centre of it. Netflix says it does not do behavioural advertising on them, and the state calls that a half-truth because the same collection systems still run.
- Florida wants the data purged, the dark patterns stopped, and civil penalties that triple where a known child is involved.
- None of this is proven. It is a complaint, Netflix has not answered it in court, and the state has demanded a jury trial.
The promise in the state's own words
The case is built on things Netflix said in public. According to the complaint, the company's chief executive told audiences "We don't collect anything" and described the service as a safe respite where families could relax with none of the controversy around exploiting users with advertising. Florida's argument is that the subscription was sold as a way out of behavioural surveillance and did not deliver one.
What the state says was happening instead is a logging operation on a scale most subscribers would not guess: which devices Floridians and their children use, where they are while using them, and what they watch, pause, rewind, search, skip and abandon. The complaint says this material trains algorithms and powers advertising.
We're really a [data] logging company ... a logging company that occasionally streams movies. And this is true.
A Netflix engineer in a 2016 conference talk, quoted in Florida's complaint
That line is a decade old and was said to other engineers, not to customers. Its presence in a legal filing is the point the state is making: the gap between how the company describes itself to the people who pay it and how it describes itself to people who build it.
Why kids profiles matter most here
Netflix markets a Kids profile as a child's own space, labels content as great for kids, and aims the experience at ages 12 and under. Its help pages state that it does not engage in behavioural advertising on Kids profiles, and, according to the complaint, it uses that statement as grounds to withhold the behavioural-ads opt-out from those profiles entirely.
Florida does not argue the statement is false. It argues it is a half-truth: not serving behavioural ads to a child is not the same as not collecting and analysing that child's viewing behaviour, and the complaint says the same systems used on adults keep running underneath. A parent reading the assurance would reasonably conclude the data is not being gathered at all.
Autoplay as an exhibit
The complaint treats interface design as conduct rather than decoration. Its example is autoplay: on by default for every profile including children's, with the setting to turn it off placed where it is unlikely to be found. The state's characterisation is that autoplay deliberately removes the natural stopping points that tell a viewer to get up and leave, and it cites expert material on the effect of that on minors' self-regulation.
This is why the case is not only about privacy law. Florida is asking a court to order an end to design choices that keep children watching, which is a different remedy from a fine and a harder one for a company to absorb quietly.
What Florida is asking for
- A permanent injunction against the practices described.
- An order that Netflix purge all data it deceptively collected from Floridians.
- An order barring the use of that data for any advertising purpose or in any advertising technology stack.
- An end to the dark-pattern designs that keep children watching.
- Civil penalties of up to $50,000 per violation, trebled for violations involving Floridians who are known children, plus costs and fees.
The claims are brought under the Florida Deceptive and Unfair Trade Practices Act and the Florida Digital Bill of Rights, the second of which is the part that makes selling sensitive personal data collected from known children without prior consent actionable in its own right.
Why this matters outside Florida
The interesting part is not that a streaming service collects telemetry. It is the claim that paying to avoid advertising did not change what was collected, only what was done with it afterwards. If that argument succeeds, "ad-free" becomes a statement about the output rather than the input, and every paid tier sold on a privacy promise inherits the question.
It also sits alongside a broader shift in how children's data is being governed. A day after this filing, California signed a package of thirteen laws on children and technology, including one that bans algorithmic feeds and autoplay outright for anyone under 16. Two states, two instruments: one sues over what a company already did, the other legislates the feature out of existence. Autoplay appears in both.
There is no VPN angle here worth stretching for, and it is worth saying so plainly. The data in question is generated inside an account you are logged into and paying for. Changing the route your traffic takes does not change what a service records about the profile it knows is yours. The settings that matter are the ones inside the account: turning off autoplay, and checking what the advertising preferences on each profile actually say.
