Roblox Hit by Class Action Lawsuit Claiming Game Gathers Sensitive Data from Kids

The Roblox Corporation is facing a class action lawsuit in California on behalf of two parents who claim the game is breaking federal laws.

Roblox is very popular with kids. According to the SEC filings quoted in the lawsuit, 46% of Roblox's daily users are under the age of 13, but that was true for 2022. In an interview with Roblox CEO David Baszucki in 2025, that number was placed at around 40% of the 85 million daily users.

Why is there a new lawsuit?

Roblox has had its share of class action lawsuits over the years related to content moderation, refunds, underage gambling, and many others. A few have been settled, but most are still ongoing. This is also likely one of the reasons why Roblox has been trying to implement new tools for parental control.

This new class action lawsuit aims to cover a lot more ground, accusing Roblox of multiple infractions:

· Illegally intercepting and tracking users' communications and device data through hidden scripts and fingerprinting techniques (e.g., canvas and audio fingerprinting), even before users log in or consent.
· Collecting children's personal data without verifiable parental consent, which violates the Children's Online Privacy Protection Act (COPPA).
· Sharing sensitive user data with third parties, like Google Analytics and Stripe, which constitutes a wiretap and unauthorized disclosure under federal laws.

The types of private data the lawsuit accuses Roblox of collecting include mouse movements, click behavior, phone sensor data, text chat messages, search queries, IP addresses, and many others. 

The awarded damages could be extreme

The claims are bold, and the damages could cover all US Roblox users since July 1, 2021. The lawsuit places statutory damages at $10,000+ per person under ECPA and $1,000 under the SCA. Given how many people Roblox claims to have affected, the maximum awarded damages could be in the tens of billions of dollars.

The parents also want Roblox to stop data collection, delete unlawfully gathered data, and implement proper parental consent mechanisms. These damages do not include punitive damages that the court could also award.

Roblox says it respects the law

According to a report posted by Hackread, a Roblox spokesperson offered a statement regarding this class action lawsuit.

"Roblox prioritizes safety and aims to provide a secure, civil and welcoming platform for all. We respect applicable laws and regulations, collaborating with regulators, authorities and safety organizations in the countries in which we operate. We are committed to helping protect our youngest users, undergoing regular third-party audits of our policies and practices to certify that Roblox has safety measures in place and is COPPA-compliant. We consistently update our policies to enhance user safety, security, and privacy."