Disney+ / Hulu (Disney)

California's Attorney General secured a $2.75 MILLION penalty against Disney (Feb 2026) specifically for FAILING TO HONOR customers' own opt-out requests across Disney+, Hulu, and ESPN+ — meaning people who took the time to click 'stop sharing my data' were allegedly ignored anyway. Hulu has separately faced claims (status not re-verified Oct 2026) over how it timed price-hike notices and over what it discloses in its ad-supported tier's data sharing. This is the SAME corporate family whose theme parks separately face a facial-recognition lawsuit (see the Walt Disney row) — across streaming AND physical parks, Disney's consent mechanisms are under simultaneous legal challenge.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. www.dataprotectionreport.com/2026/02/partial-compliance-is-noncompliance-lessons-from-californias-2-75-million-settlement-with-disney/ — Verified - primary source confirmed.

Arbitration

Not independently confirmed this pass for Disney+ itself — standard binding arbitration + class action waiver expected industry-wide.

Data sharing

$10 MILLION FTC/DOJ COPPA SETTLEMENT (finalized Dec 2025): Disney Worldwide Services and Disney Entertainment Operations were found to have mislabeled children-directed videos as NOT 'Made for Kids' (MFK) when uploading them to YOUTUBE — the mislabeling let YouTube collect personal data from children under 13 who watched and use that data to target advertising to them. This is a distinct 'issue' from Disney's own Disney+ streaming platform: it arose from how Disney's CONTENT was labeled on a third-party platform (YouTube/Google), illustrating that even a well-resourced company with a long public commitment to child-safety compliance (as Disney stated in response) can still trigger federal enforcement through content-labeling practices on someone else's platform.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.