Better Health for All

Roku faces allegations of collecting, selling, and enabling re-identification of sensitive personal data from children, including viewing habits, voice recordings, geolocation, ethnicity, and date of birth.

The Florida Attorney General alleges Roku derives 50% or more of its global gross annual revenues from online advertising, which is linked to these data practices. The company experienced two cyberattacks affecting a total of 591,000 user accounts out of 80 million active accounts, resulting in an adverse event rate of approximately 7,388 per million users. Less than 400 cases involved unauthorized purchases. Roku is facing lawsuits from Florida and Michigan for alleged violations of data privacy laws, including failing to disclose the sale of sensitive personal data and failing to prevent re-identification of de-identified data. Roku's ad policies prohibit targeting users under 18 and exploiting vulnerable groups. Roku hosts The Able Channel, which provides informative content on mental health, disability, oncology, and general health and wellness. Roku's alcohol ad policies prohibit ads that portray excessive drinking favorably and require promoting responsible consumption, and it prohibits ads for cannabis, illicit drugs, tobacco, and gambling.

Fair Money & Economic Opportunity

Roku's core business is a TV streaming platform, not financial services. Consequently, most KPIs related to lending, fees, debt, and financial literacy are not applicable. For data accessibility, only California residents have the right to request deletion of their data (up to twice every 12 months), request a copy of their personal information, and opt-out of the sale of their personal information.

Roku does not provide a way for all users to delete their data. Furthermore, a lawsuit filed by the Michigan Attorney General alleges Roku collects and uses children's personal data (voice, location, IP addresses, browsing history) without proper parental consent, potentially violating COPPA, VPPA, and the Michigan Consumer Protection Act. Roku also lacks a dedicated contact for disclosing security vulnerabilities and an established vulnerability management system.

Fair Pay & Worker Respect

Roku's CEO-to-median employee pay ratio was 108:1 in 2024, with the median employee compensation at $255,499.

For Roku UK Limited in 2024, the median hourly gender pay gap was 25.3%, meaning women earned 74.7% of men's median hourly pay. The median bonus pay gap was 33.9%. Employee reviews on Glassdoor show an overall rating of 3.5 out of 5 stars (70/100) and a culture and values rating of 3.3 out of 5 stars (66/100). 61% of employees would recommend working at Roku to a friend. Roku offers comprehensive benefits, including health insurance (medical, dental, and vision) which is fully covered for the individual, with options for dependents. Global access to mental health and financial wellness support is also provided. Only employees in Brazil are represented by a labor union. Roku's Code of Conduct requires team members to report suspected violations and states that Roku will not retaliate against good faith reports. There are no substantiated labor law or human rights violations reported in the provided articles.

Fair Trade & Ethical Sourcing

No specific quantitative data was found for any of the KPIs related to Fair Trade & Ethical Sourcing. While Roku states it has a Supplier Code of Conduct incorporated into master service agreements with key manufacturing suppliers, and uses a standard clause in agreements requiring suppliers to ensure their supply chains are free from modern slavery, the percentage of suppliers covered by these clauses is not specified.

Similarly, while a conflict minerals report identifies 225 out of 226 smelters/refiners as RMAP conformant, it also notes incomplete or unverifiable country-of-origin information from some suppliers and limited ability to verify accuracy, and does not provide a percentage of overall supply chain traceability.

No War, No Weapons

No specific, concrete evidence was found in the provided articles to assess Roku, Inc. against any of the KPIs for the 'No War, No Weapons' ethical value. While some articles mention Roku's general business as a streaming platform or discuss its conflict minerals policy, they do not provide quantitative data or explicit details regarding revenue from arms contracts, dual-use technology, sales to embargoed regimes, peacebuilding investments, divestment policies, board oversight of defense activities, export controls, lobbying on arms control, or other specific metrics required by the rubric.

Statements like 'Not applicable' or 'No information found' are not considered evidence for scoring.

Planet-Friendly Business

Roku has committed to achieving net-zero emissions across all scopes by 2050, a target established in 2023.

However, the company has not reported any Science-Based Targets Initiative (SBTi) reduction targets. As of 2023, 72% of Roku's operational energy consumption across data centers and facilities was sourced from renewables.

Safe & Smart Tech

Roku experienced two cyberattacks, affecting 15,000 user accounts in an earlier incident and approximately 576,000 additional accounts in a subsequent attack, totaling 591,000 compromised accounts.

Following these incidents, Roku implemented two-factor authentication across all accounts. However, the company faces multiple lawsuits from the Florida and Michigan Attorneys General, alleging violations of privacy and consumer protection laws, including the Children’s Online Privacy Protection Act (COPPA) and the Florida Digital Bill of Rights (FDBR). These lawsuits accuse Roku of collecting and selling children’s personal data, such as viewing habits, voice recordings, and precise geolocation, without parental consent. Roku is also alleged to have misrepresented the effectiveness of its privacy controls and opt-out tools, and to have willfully disregarded the presence of children on its platforms, failing to implement industry-standard user profiles to identify minors or conduct reasonable age verification. The Florida AG's lawsuit, filed in October 2025, seeks penalties of $50,000 per violation, tripling to $150,000 for violations involving known children. Roku is also accused of failing to prevent re-identification of de-identified data shared with advertisers and data brokers. While Roku states it provides clear explanations about its data sharing practices to adult account holders, the allegations of misrepresentation and unauthorized data use for children suggest a lack of transparency for a significant user group.

Zero Waste & Sustainable Products

In 2023, Roku's waste diversion rate was 78%.

The recycling rate for electronic components is approximately 78%. The company has implemented an electronic waste recycling program. Roku requires its suppliers to meet strict environmental standards.