Rob Bonta, Attorney General of California, announced the signing of an agreement with Disney which closes the proceedings started over two years ago. The US company agreed to pay $2.75 million for violating state law on privacy. It will also have to implement an opt-out mechanism to allow users to block the collection of personal data.
Disney violated the CCPA
The California Department of Justice had launched an investigation into streaming services a end of January 2024. Disney does not offer consumers an effective method to block data collection, sharing and sale (opt-out). This represents a violation of the California Consumer Privacy Act (CCPA).
In detail, three critical issues relating to the solutions implemented by the US company were identified during the investigation. When a user requests not to sell or share their data through a opt-out button present on sites and apps, Disney applies the request only to the specific streaming service the user was watching and often only to the specific device used. This does not prevent selling or sharing from other devices or services connected to your account.
However, if a user opts out via the web form, Disney will only stop sharing personal data via its advertising platform, while continuing to sell and share the data with third parties. Disney also doesn’t provide an in-app opt-out method in many of its smart TV streaming apps, directing consumers to the web form.
Finally, for consumers who have expressed their refusal via the Global Privacy Control (GPC), Disney ha limited the request to the specific device the consumer was using, even when logged into their account.
Disney avoided a long and expensive trial with the out-of-court settlement. He agreed to pay $2.75 million and to change opt-out options to allow users to prevent the collection, sharing and sale of their personal data.
date: 2026-02-14 16:54:00