ACR, or Automatic Content Recognition, is a feature that identifies what is playing on a screen by sampling video or audio and comparing it to known fingerprints or reference databases. Smart TVs and streaming devices use ACR to measure viewing habits, power recommendations, and support ad targeting, even when the source is an HDMI input rather than an app.
In cyber security, ACR matters because it turns a display into a data-collection sensor. A television can learn what content is shown, when it is watched, and sometimes enough context to infer sensitive activity in a home, office, or meeting room. Defenders should treat ACR as a privacy and governance risk: review device privacy settings, disable content recognition where possible, and place smart TVs on isolated networks. In an attack or abuse scenario, the danger is not usually code execution; it is surveillance through a trusted appliance that quietly reports viewing data to external services.