United States of America: California Attorney announced a settlement with Disney including 2.75 million penalties resolving allegations of non-compliance with Consumer Privacy Act

On 11 February 2026, the California Attorney General announced a settlement with Walt Disney Company, including USD 2.75 million in penalties, to resolve allegations of non-compliance with the California Consumer Privacy Act (CCPA). Disney is required to provide clear and conspicuous notice that they engage in cross-context behavioural advertising using personal information obtained from third parties. It must also implement a consumer-friendly opt-out process with minimal steps across Disney streaming services. Where a logged-in consumer opts out, the choice must apply to all streaming services linked to the consumer’s Disney account. In addition, the Disney companies must include a clear and conspicuous opt-out link and a notice of the right to opt out of the sale or sharing of personal information across their streaming services. They must notify third parties to whom they have sold or shared personal information following an opt-out request. The settlement also requires them to continue refraining from selling or sharing the personal information of children or minors without proper authorisation. Within 180 days, the Disney companies must implement a three-year monitoring programme with annual reporting obligations.