The TV in Your Reception Is a Data Protection Question

A smart TV with content recognition switched on samples what is on screen and reports it to the manufacturer for advertising. It does it over an HDMI input as readily as on a live channel. Put one in a reception showing a patient list, a production dashboard or a welcome message and two questions follow: who in the room can read it, and what the television reports home. This post answers both and ends with a checklist you can walk round your entrance with.

What a smart TV does with what is on it

The feature is called automatic content recognition, ACR for short. The TV takes a fingerprint of what it is showing, sends it to a server, and the server matches it against a library of programmes and adverts. The result is a record of what that screen displayed, sold on as audience data.

The best public measurement is a 2024 study by researchers at University College London, UC Davis and Universidad Carlos III de Madrid, presented at the ACM Internet Measurement Conference (the paper). They tested Samsung and LG sets in the UK and the US and watched the network traffic. Three findings matter for a reception:

• ACR ran when the TV was “used as a ‘dumb’ external display” over HDMI. So a laptop, a signage player or a dashboard box plugged into the HDMI socket is sampled like a broadcast.
• Opting out worked. After the ACR setting was switched off the researchers saw “a complete absence of communication” with the ACR servers.
• The rates are high. The paper quotes LG’s own documentation that its ACR captures frames every 10 milliseconds and observed fingerprints sent every 15 seconds; Samsung’s documentation says every 500 milliseconds, sent every minute. The researchers could not read the payloads, which were encrypted, so they did not confirm whether the samples were images, audio or both.

In September 2026 the question moved from the lab to the news. Gamers Nexus and Level1Techs published an investigation of several LG sets on 6 September and a follow-up on 12 September in which they said an LG TV on an HDMI input sent data to LG Ad Solutions up to twenty times a minute, including a device identifier and location fields, alongside audio fingerprints of the HDMI content. They also said the sets recorded audio through their microphones on standby. LG’s statement of 12 September 2026 denies the microphone claim: “LG smart TVs do not continuously record or transmit users’ conversations.” It says ACR “uses audio fingerprinting technology to identify content”, is “an optional feature that is turned off by default”, and does not collect “screenshots, screen images” or voice recordings; it also says ACR-related viewing information “may be shared with LG Ad Solutions”. The two accounts have not been reconciled in public and this post does not try to.

What is settled is the regulatory direction in the United States. Texas sued LG, Samsung, Sony, Hisense and TCL over ACR in December 2025. Samsung agreed in March 2026 to stop collecting ACR data from Texans without explicit consent, and LG entered an agreed judgment in May 2026 requiring affirmative express consent before it collects viewing data (Malwarebytes, ecoustics). Those are American settlements and say nothing about UK law. They do tell you that the default on a set bought for the home was not designed with your reception in mind.

The older problem: who in the room can read it

The television reporting home is the new worry. The old one is the person standing in front of it, and that one has a UK regulator’s decision behind it.

In May 2023 the Information Commissioner’s Office reprimanded Parkside Community Primary School after an email from its safeguarding system was opened on a classroom computer and shown on the electronic whiteboard. The reprimand records that the school “inappropriately disclosed personal data, including special category data, of a sensitive nature in a classroom environment”, that four people were affected, three of them children, and that there was “no written procedure or guidance available to employees in relation to the safe operation of the electronic whiteboards, particularly when screensharing”. The ICO found infringements of Article 5(1)(f), Article 24(1) and Article 32 of the UK GDPR and recommended written guidance and refresher training on the whiteboards.

A reception screen is the same device in a different room, with a public in front of it instead of a class.

The ICO’s own physical security toolkit sets out what it expects, in plain lines: “Position computers and devices displaying personal information in a way that reduces the risk of unauthorised access.” “Use screen filters or privacy screens.” “Document clear desk and clear screen requirements in policies and procedures.” “Set screens to automatically lock after an appropriate period of time.” And, in the same list, “Monitor the granting of visitor and guest access.” The page carries a note that it is under review after the Data (Use and Access) Act, so read it on the day.

Two standards say the same thing in their own words. ISO/IEC 27001:2022 has a control titled “Clear desk and clear screen”, number 7.7 in Annex A, which is where an auditor will file a reception screen. For UK suppliers working to NIST SP 800-171 Revision 2, requirement 3.10.2 reads “Protect and monitor the physical facility and support infrastructure for organizational systems”, and its discussion says that monitoring “includes publicly accessible areas within organizational facilities”; the mapping table in Appendix D lists NIST SP 800-53 PE-5, “Access Control for Output Devices”, among the controls behind the two basic physical protection requirements, 3.10.1 and 3.10.2, a screen being an output device. None of that makes a screen unlawful. It makes it a thing you are expected to have thought about and written down.

Three screens, three different leaks

The waiting room call screen. Surgeries, dental practices, hospital outpatients and occupational health rooms call patients by name on a screen. The practice has been argued over for twenty years: Digital Health reported in 2006 that the Medical Defence Union had asked the General Medical Council about LED boards and that the GMC raised no ethical objection provided the board did not show the nature of the treatment and patients were told about the system and could opt out. A 2013 exchange on Care Opinion shows the working answer: a cancer centre’s screens showed full names, a patient objected, and the centre replied that its system “allows for ‘alias’ to be set up each day for patients that do not want their name displayed on calling screens”, that it calls by name “but does not give details of the specialty”, and that reception staff would be retrained to offer the alias. The leak here is the name plus the place: a full name on the screen of a sexual health clinic or an oncology unit tells the room something the person did not choose to tell it.

The dashboard. Manufacturers put production boards, OEE screens and order lists on reception and canteen TVs. Most show numbers, which is fine. Some show the customer column, the operator’s name against a downtime event, or a delivery schedule with a haulier’s name and a time. A competitor’s rep waiting for a meeting reads it as easily as your staff do. The leak here is commercial as often as it is personal, and it is the one most likely to be on a smart TV over HDMI, which is the ACR case.

The welcome board. Some visitor systems and some receptionists put “Welcome Jane Smith, Acme Ltd, meeting Mr Patel” on the lobby screen. It is friendly and it is a disclosure: who is visiting, from where, and whom they are seeing, to everybody else who walks in that morning. On a day when the visitor is a buyer, an auditor or a candidate, that line is the story.

The checklist

Walk the entrance with this. It takes twenty minutes.

1. List every screen a non-employee can see from the door, the seats and the counter: wall TVs, the receptionist’s monitor, the sign-in device, any tablet on the counter. Write down what each one shows during a normal hour.
2. For each one, ask who it is for. A call screen is for patients, a dashboard is for staff, a welcome board is for the visitor. Anything the screen shows to people it is not for is the exposure.
3. Take the names off. Call screens: first name and initial, or a ticket number, and an alias on request, with no department or clinic shown. Dashboards: numbers, not people or customers, on any screen in a public area. Welcome boards: a greeting without a name, or none.
4. Find out whether the wall TV is a smart TV. If it has apps, it has an ACR setting. Switch the setting off and write down the date you did it. The menu names on 13 October 2026, from Malwarebytes and Kraft Kennedy, which differ by model and year:
   • Samsung: Settings, Support, Terms & Privacy, Privacy Choices, turn off Viewing Information Services.
   • LG: Settings, All Settings, General, System, Additional Settings, turn off Live Plus; also check General, User Agreements.
   • Sony and other Google TV sets: Settings, Privacy, turn off Samba Interactive TV, or Device Preferences, Usage & Diagnostics on older sets.
   • Roku-based sets (many TCL and Hisense models): Settings, Privacy, Smart TV Experience, untick “Use info from TV inputs”. That one names the HDMI case directly.
5. Decide whether the TV needs the internet at all. A screen that only shows an HDMI input does not. Take it off the Wi-Fi, or buy a commercial display with no apps; the study found that the opt-out stopped the traffic, and a set with no connection cannot send any.
6. Check it again after every software update, because consumer guides report settings being reset by updates, and the Texas settlements show the defaults are still being argued over.
7. Find the microphone. Most sets put it in the remote; some newer ones have one in the frame. LG’s statement says some of its models have “a dedicated hardware microphone switch”. If the set has one, use it. If the remote has a voice button, keep the remote at the desk, not on the coffee table.
8. Write it down. Four lines in the clear screen section of your information security or data protection policy: which screens are in public areas, what they are allowed to show, who checks the TV settings and when. That is the document the ICO toolkit, ISO 27001 7.7 and the Parkside reprimand all ask for, and it is the thing an assessor can read.

The screen on the counter

The sign-in device is a screen in the reception too, so it should pass the same walk. Ours is an iPad on a stand. Between arrivals it shows your logo or your company name and three buttons, Sign In, Sign Out and Delivery, and nothing else; the screensaver is the same logo. A visitor signing out types at least three letters of their own name and sees one masked match, or is asked for their company if more than one person fits; never a list. Nothing on the counter names the previous visitor, the host or anyone on site, and there is no lobby welcome board. Who is on site is on the roll call, behind a login, for the people who need it. An iPad in a locked kiosk mode has no advertising recognition to switch off, which is one of the reasons we use one.