Full Breakdown
California DOJ Settles with Disney Over Consumer Privacy Violations
2/12/2026, 2:37:08 PM
Settlement Overview
The California Department of Justice (DOJ) has reached a settlement with The Walt Disney Company, resulting in a $2.75 million civil penalty for violations of the California Consumer Privacy Act (CCPA). Announced on February 11, 2026, the settlement addresses allegations that Disney failed to adequately honor consumer requests to opt-out of the sale or sharing of personal information across its streaming services. The settlement mandates that Disney implement comprehensive opt-out mechanisms to ensure compliance with consumer privacy rights.
Investigation Background
The investigation into Disney's data privacy practices began in January 2024 as part of a broader inquiry into major streaming services for potential CCPA violations. The DOJ found that Disney's existing opt-out processes were insufficient, often applying only to individual services or devices rather than to a user's entire account. For instance, toggles on Disney's platforms did not effectively stop data sharing with third-party ad tech companies, and Global Privacy Control (GPC) signals were limited to specific devices.
Key Provisions of the Settlement
Under the terms of the settlement, Disney is required to cease selling and sharing consumer personal information and to stop conducting cross-context behavioral advertising based on that data. The settlement agreement specifies that Disney must provide clear and conspicuous notice to consumers regarding data collection practices and their rights to opt-out. This includes a commitment to ensure that consumers can easily understand the information being collected and the sources from which it is obtained.
Official Statements & Responses
California Attorney General Rob Bonta emphasized the importance of consumer privacy rights, stating, “Consumers shouldn’t have to go to infinity and beyond to assert their privacy rights.” He noted that this settlement represents the largest CCPA enforcement action to date, reinforcing California's commitment to protecting consumer data. Disney, while not providing extensive commentary on the settlement, stated through a spokesperson that it continues to invest in responsible and transparent data practices across its streaming services.
Criticism & Opposition
While the settlement marks a significant step in enforcing consumer privacy rights, critics argue that the penalties may not be sufficient to deter future violations by Disney or other companies. Some privacy advocates express concern that the complexities of data-sharing practices may still confuse consumers, despite the new requirements for clearer opt-out mechanisms.
What's Next
The California DOJ continues to conduct investigative sweeps targeting privacy compliance across various industries, with other streaming services reportedly under investigation for similar CCPA violations. This ongoing scrutiny suggests that further enforcement actions may follow as the state seeks to uphold its stringent data privacy standards.
Verbatim Quotes
“Consumers shouldn’t have to go to infinity and beyond to assert their privacy rights,” — Rob Bonta, California Attorney General
“DEFENDANTS shall provide CLEAR AND CONSPICUOUS notice to CONSUMERS in connection with DISNEY SERVICES that DEFENDANTS conduct CROSS CONTEXT BEHAVIORAL ADVERTISING using PERSONAL INFORMATION obtained from THIRD PARTIES,” — Settlement Agreement
“As an industry leader in privacy protection, Disney continues to invest significant resources to set the standard for responsible and transparent data practices across our streaming services,” — Disney Spokesperson
