Roblox Children’s Data Privacy Class Action Sent to Arbitration

A federal class action lawsuit alleging that Roblox Corporation secretly collected personal data from millions of children — including users under 13 — without parental consent has been ordered to arbitration, effectively ending the case as a class action in court. U.S. District Judge Wesley Hsu of the Central District of California granted Roblox’s motion to compel arbitration on February 11, 2026, finding that the plaintiff family received sufficiently conspicuous notice that clicking “Sign Up” or “Continue” on the platform bound them to Roblox’s terms of use, including its mandatory arbitration clause.

In response to this ruling, attorneys pursuing the case have announced plans to pursue the data privacy claims through mass arbitration — a relatively new technique that, like a class action, allows large numbers of affected individuals to take action simultaneously against a company, but through the arbitration process rather than in court.

What this means for you: If your child used Roblox and you believe their data was collected without your consent, you cannot join a class action lawsuit in federal court for this specific case. Your primary legal option is individual or mass arbitration. No claims process is currently open, but a mass arbitration effort is being organized.

Quick Facts Snapshot

Lawsuit Allegations: What Did Roblox Allegedly Do?

The Core Surveillance Claims

Plaintiffs Michael and Salena Garcia alleged that they allowed their 12-year-old child, R.G., to use Roblox, believing it to be a safe, child-friendly platform. They claim that without their knowledge, Roblox was secretly recording R.G.’s online interactions and device details. Had they known the truth — that Roblox would “effectively spy on their child’s activities and identity for profit” — they would not have allowed their child to use the platform.

The Tracking Technologies Alleged

According to the complaint, this alleged surveillance begins the moment a user accesses the platform — before logging in or creating an account — and continues across devices and browsers using persistent identifiers and fingerprinting. The plaintiffs claim that Roblox’s tracking mechanisms include canvas fingerprinting, audio fingerprinting, and keystroke logging, which harvest device configurations, IP addresses, mouse movements, and other sensitive details. This information is then transmitted in real time to Roblox’s servers and to third parties for marketing and analytics purposes.

Specifically, the complaint described these practices as follows:

• Canvas fingerprinting: Using the HTML5 canvas to extract a unique device signature
• Audio fingerprinting: Using the Web Audio API to generate unique sound-based identifiers that persist across sessions and devices, enabling re-identification
• Data sharing: Transmitting collected data to third-party advertisers and analytics firms without user consent
• Behavioral profiling: Building behavioral analyses of players to show targeted content and keep them “hooked” on the platform

What Plaintiffs Alleged Was Done With Children’s Data

The lawsuit claims that Roblox used a variety of hidden tracking technologies to effectively “wiretap” every interaction between a player and the gaming platform. Roblox then monetized that data on its own platform by building behavioral analyses and distributed it to third-party advertisers. At no point, the filing alleges, were users — or their parents, in the case of minor users — ever asked to give or revoke consent for Roblox’s alleged data collection, and Roblox allegedly never provides notice or warning of any data tracking practices.

Related article: Match Group Class Action Lawsuit, Data Breach Allegations Explained

The COPPA Dimension

Plaintiffs argued that Roblox’s conduct violated COPPA’s provisions, and that this violation also invalidated any “consent” defense Roblox might claim under other laws. The complaint alleged that Roblox knowingly profiled children to enhance its profits — a purpose that contravenes public policy and statutory law.

Roblox’s Response

Roblox denied the allegations, stating: “We are committed to protecting our youngest users, undergoing regular third-party audits of our policies and practices to certify that Roblox has safety measures in place and is COPPA-compliant.” The company also states in its privacy policy that it does not collect or use personal information about users under the age of 13 for advertising or marketing purposes.

Legal Claims Filed

The complaint asserted three federal causes of action:

• Electronic Communications Privacy Act (ECPA) / Federal Wiretap Act, 18 U.S.C. § 2511 — Alleged unlawful interception of electronic communications; provides for statutory damages of at least $10,000 per person
• Stored Communications Act (SCA), 18 U.S.C. § 2701 — Alleged unlawful access to and disclosure of stored electronic communications
• Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq. — Alleged unlawful collection of children’s personal information without verifiable parental consent

Who Could Be Affected: The Proposed Class

The Garcias sought to represent a nationwide class of potentially millions of people, including children and adults, who used the Roblox platform at any time from July 1, 2021, to the present.

Factors that may indicate potential eligibility:

• Your child (under 18, particularly under 13) used Roblox between July 1, 2021 and the present
• You, as a parent or guardian, created or supervised a Roblox account for a minor child
• You used Roblox yourself as an adult or minor and believe your data was collected without adequate consent disclosure
• You are located in the United States (nationwide class was proposed)

Critical note on arbitration: Because the class action was sent to arbitration, there is no certified class and no class to join in court. The original class definition is no longer operative for court purposes. Your legal options are individual arbitration against Roblox under its Terms of Use, or participation in the organized mass arbitration effort described below.

Current Case Status: What the Arbitration Order Means

The Court’s Ruling Explained

Roblox moved to compel arbitration, arguing that the Garcias created three separate accounts and clicked “Sign Up,” “Continue,” “Redeem,” and “Buy” buttons on the platform multiple times between May 2023 and March 2025. Each time, Roblox said, the family was notified that proceeding constituted acceptance of the company’s terms of use and arbitration provision. Judge Hsu granted Roblox’s motion, finding that the plaintiffs assented to the arbitration clause, relying on a 2024 Ninth Circuit decision holding that users had reasonably conspicuous notice of an arbitration provision through a sign-in wrap agreement in a mobile app.

What About Minors’ Rights to Disaffirm?

Plaintiffs argued that the minor plaintiff, as a minor, could disaffirm the agreement under California law. The court acknowledged that minors have the right to disaffirm contracts, but held that the minor’s continued use of the platform after filing the lawsuit undermined any effective disaffirmance. A minor cannot retain the benefits of a contract while repudiating its obligations. Moreover, the court found equitable grounds to bind the minor because her parents — who were unquestionably bound — created and supervised the accounts.

The Two Versions of Roblox’s Terms of Use

The court distinguished between two versions of Roblox’s Terms of Use. The 2025 TOU contained a clear delegation clause assigning disputes about interpretation, enforceability, and scope to the arbitrator. By contrast, the 2023 TOU lacked such a clause, so the court itself analyzed arbitrability for earlier claims. The court concluded that the 2023 arbitration provision broadly covered disputes arising from Roblox’s services, including the alleged data collection practices. All claims — whether pre- or post 2025 — fell within arbitration.

What Arbitration Means vs. A Class Action

What Is Mass Arbitration?

Because of the arbitration clause, attorneys working with ClassAction.org have decided to pursue the potential Roblox privacy issue through mass arbitration — a relatively new legal technique that, like a class action lawsuit, allows a large group of people to take action and seek compensation from a company over an alleged wrongdoing, but through the arbitration process rather than in court. In mass arbitration, hundreds or thousands of individual arbitration demands are filed simultaneously, which can create significant pressure on a company to reach a settlement.

The Arbitration Clause Language

Roblox’s 2023 Terms of Use stated: “USER AGREES THAT USER IS GIVING UP THE RIGHT TO FILE A LAWSUIT IN COURT BEFORE A JUDGE OR JURY, INCLUDING IN A CLASS ACTION, FOR DISPUTES THAT ARE SUBJECT TO ARBITRATION.”

Settlement Details

There is no settlement in the data privacy case (Garcia et al. v. Roblox Corporation). No compensation is available, no claims deadline has been set, and no settlement fund has been established. The case has been sent to individual arbitration, ending the court-based class action.

If a resolution is eventually reached through mass arbitration or individual arbitration, potential remedies that could be sought include:

• Statutory damages under ECPA (the law provides for at least $10,000 per person as liquidated damages)
• Injunctive relief requiring Roblox to delete data collected from children without consent and cease unlawful collection practices
• Attorneys’ fees and litigation costs
• Actual damages if proven

These amounts are theoretical and have not been awarded. No arbitration has been concluded in this matter as of March 2026.

What Parents and Families Should Do

Step 1 — Understand which lawsuit applies to you. This article covers the data privacy case (Garcia et al. v. Roblox, Case No. 2:25-cv-03476) involving alleged covert tracking and data collection. This is distinct from the separate MDL involving child sexual exploitation (MDL 3166). If your child was sexually exploited or groomed on Roblox, see the section on Related Cases below and consult an attorney immediately.

Step 2 — Preserve all documentation. Even though no claims process is open, gather and store: Roblox account creation dates, usernames, and account emails; any parental consent interactions you had with Roblox; records of any data collection notices or privacy policy acceptances; screenshots of your child’s account settings and parental control configurations.

Step 3 — Consider joining the mass arbitration effort. Attorneys are actively recruiting claimants for a mass arbitration approach. Visit classaction.org for information about the Roblox data privacy mass arbitration. Initial consultations are typically free.

Step 4 — File a COPPA complaint with the FTC. COPPA is enforced by the Federal Trade Commission and state attorneys general. You can file a complaint directly at reportfraud.ftc.gov. Private individuals cannot sue under COPPA directly, but FTC enforcement can result in significant penalties and data deletion orders. The FTC recently updated the COPPA Rule in January 2025 and remains an active enforcement agency in this space.

Step 5 — Contact your state Attorney General. Multiple state AGs are actively investigating and suing Roblox. If you are in California, Texas, Iowa, Louisiana, Kentucky, Tennessee, or another state where action has been filed, your state AG’s office may have a complaint process for children’s privacy violations.

Step 6 — Review your Roblox account settings and parental controls. Regardless of the litigation outcome, enabling available parental controls is a practical step. Roblox now offers: parental supervision accounts, messaging limits for children under 13, content ratings filters, and optional facial age verification.

Contact information:

• FTC Complaint Portal: reportfraud.ftc.gov
• COPPA information: ftc.gov/coppa
• Plaintiffs’ Counsel (Data Privacy): Counterpoint Legal — Morgan D. Ross and Robert B. Salgado (search current contact via California State Bar or court docket)
• Mass Arbitration Inquiry: classaction.org/roblox-data-privacy-lawsuit-alternative
• Roblox Support: roblox.com/support; Roblox Parent Resources: corp.roblox.com/parents

Regulatory and Legal Context

COPPA: The Governing Law

The Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., is the primary federal law governing the online collection of personal data from children under 13. COPPA requires that operators of websites and online services directed at children:

• Provide clear and comprehensive notice of data collection practices
• Obtain verifiable parental consent before collecting any personal information from children under 13
• Give parents the ability to review and delete their children’s personal information
• Not condition a child’s participation in an activity on providing more information than is reasonably necessary

Important: COPPA does not provide a private right of action — individuals cannot sue directly under COPPA. Enforcement is exclusively through the FTC and state attorneys general. This is why the Garcia lawsuit relied primarily on ECPA and SCA claims, which do allow private lawsuits, using COPPA violations to support those claims.

Prior FTC Enforcement Against Children’s Platforms

The FTC has a robust history of COPPA enforcement actions against gaming and social media companies:

In FTC v. Musical.ly (now TikTok), the platform paid a $5.7 million fine for COPPA violations, establishing that ignorance is not a defense when children’s safety is at stake. Additional recent enforcement actions include: Epic Games (Fortnite) — $275 million COPPA settlement in 2023; Amazon (Alexa) — COPPA and privacy settlement in 2023; Microsoft — COPPA settlement in 2023; and Cognosphere — COPPA settlement in January 2025. No FTC enforcement action specifically against Roblox for data privacy violations has been announced as of March 2026, though multiple attorneys general have filed separate suits.

The Growing Roblox Regulatory Storm

The attorneys general of Louisiana, Kentucky, Iowa, Texas, and Tennessee have filed lawsuits against Roblox alleging the platform failed to protect children from sexual exploitation and was deceptively marketed as safe for children. Florida’s attorney general has subpoenaed Roblox for information about its age verification and chat moderation policies. In February 2026, Los Angeles County filed a separate lawsuit alleging unfair and deceptive business practices that endanger and exploit children.

The Sexual Exploitation MDL: A Separate Case

The Garcia data privacy case is entirely separate from the child sexual exploitation litigation. In December 2025, dozens of Roblox child exploitation cases were officially centralized in multidistrict litigation (MDL 3166), grouping similar cases under one judge in California federal court for coordinated legal proceedings. As of early 2026, there are over 115 pending lawsuits in MDL 3166, representing minors who claim they were sexually assaulted by someone they met while playing Roblox. If your child was sexually exploited or groomed through Roblox, this MDL — not the data privacy arbitration — is the relevant legal avenue, and these sexual abuse claims may be exempt from arbitration under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act of 2022.

The Arbitration Resistance Movement

A group of 800 parents sent a jointly-signed letter to Roblox’s board of directors urging the company to stop its attempts to force child sexual exploitation and grooming lawsuits into private arbitration. Critics of Roblox’s arbitration strategy argue it is “a motion to silence families” and prevents the public from learning about alleged harms to children. Roblox has said in filings that its arbitration agreement is “consumer friendly and cost friendly.”

Frequently Asked Questions

Q: What specifically did Roblox allegedly do with children’s data? The lawsuit claims Roblox used hidden tracking technologies to “wiretap” every interaction between a player and the platform, recorded online interactions and device details, built behavioral analyses of players — including children — to show targeted content and keep them hooked on the platform, and distributed data to third-party advertisers. At no point, the filing alleges, were users or their parents ever asked to give or revoke consent for this tracking.

Q: Which Roblox users are potentially affected by the data privacy claims? The lawsuit originally sought to represent a nationwide class of people, including children and adults, who used the Roblox platform from July 1, 2021 to the present. Because the case was sent to arbitration, there is no certified class. Potential victims are anyone — particularly children under 13 — who used Roblox during that period and whose data may have been collected and shared without proper consent.

Q: Can I still join a lawsuit against Roblox for data privacy violations? Not the Garcia class action — it was sent to arbitration on February 11, 2026, effectively ending the court-based class action. Because of the arbitration clause, attorneys are pursuing the potential Roblox privacy issue through mass arbitration — a technique that allows a large group of people to seek compensation through the arbitration process rather than in court. You may be able to participate in the mass arbitration effort by contacting attorneys at classaction.org.

Q: What is mass arbitration and how does it differ from a class action? Mass arbitration involves filing hundreds or thousands of individual arbitration demands simultaneously rather than a single class action in court. While it lacks many features of a class action — there is no public jury trial, proceedings are typically confidential, and appeal rights are limited — it can create significant pressure on a company when many claims are filed at once. The process is handled before a neutral arbitrator under consumer arbitration rules, typically at no cost to the claimant.

Q: Did Roblox violate COPPA? That has not been determined. The lawsuit alleged COPPA violations, but COPPA tasks the FTC and state attorneys general with enforcement — the law does not allow private individuals to sue directly under COPPA. Roblox denies the allegations and states it undergoes regular third-party audits to certify COPPA compliance. No FTC enforcement action against Roblox specifically for data collection practices has been announced as of March 2026.

Q: My child was sexually exploited or groomed on Roblox. Is this the right case? No. The Garcia data privacy case involves covert data collection and tracking. If your child was sexually exploited, groomed, or harassed through Roblox, you should consult an attorney about MDL 3166 — In re: Roblox Corporation Child Sexual Exploitation and Assault Litigation. As of early 2026, a federal judicial panel ordered nearly 80 Roblox sexual abuse lawsuits to be centralized in a California federal court under Judge Seeborg for coordinated pretrial proceedings. These sexual abuse claims may be exempt from forced arbitration under federal law.

Q: Is there a deadline to take action? No formal claims deadline exists because no claims process has been established. However, legal claims have statutes of limitations — typically 2–3 years for privacy claims depending on the state and cause of action. To protect your rights, consult with an attorney as soon as possible rather than waiting for a formal process to open.

Q: What compensation could I receive? No compensation has been determined or awarded. If individual or mass arbitration proceeds and results in a resolution, potential remedies could include statutory damages under ECPA (the statute provides for at least $10,000 per person as liquidated damages), data deletion, and injunctive relief. These are theoretical amounts — the actual outcome of any arbitration is uncertain.

Q: Can a minor’s Roblox account terms bind the minor to arbitration? In this case, the court ruled that the minor plaintiff did not effectively disaffirm the arbitration agreement because she continued using the platform after the lawsuit was filed. The court also found equitable grounds to bind the minor because her parents created and supervised the accounts. This ruling is specific to these facts; other courts may reach different conclusions. If your child is no longer using Roblox, the analysis may differ — consult an attorney for guidance specific to your situation.

Last Updated: March 1, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. All allegations in Garcia et al. v. Roblox Corporation (Case No. 2:25-cv-03476) are unproven, and Roblox has denied all wrongdoing. Arbitration outcomes differ significantly from traditional litigation — proceedings are typically confidential, appeal rights are limited, and individual remedies may differ from class action recoveries. The regulatory and legal landscape for children’s data privacy is evolving rapidly. Always consult a licensed attorney for advice tailored to your specific circumstances. For the most current information, monitor the court docket at pacer.gov and official announcements from plaintiffs’ counsel. For COPPA complaints, visit ftc.gov. If your child was sexually exploited online, contact law enforcement immediately.

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah