CA-C-000599
Disney+ — Disney+ Privacy Policy
Entity
Date detected
April 22, 2026
Effective date
April 22, 2026
Severity
Medium
Direction
Positive
Affected users
all users us users
Taxonomy
Transparency removal
Changes
+64 sentences added · 11 sentences modified
Share 𝕏 Share in Share 🔒 PDF
🔔 Get alerted when Disney+ changes their policies.
Watcher — $9.99/mo Professional →

What Changed

Disney+ replaced what appeared to be a basic subscription landing page with a comprehensive privacy policy on April 22, 2026. The new document explains in detail how Disney+ collects, uses, and shares your personal information across its digital services, physical properties, and third-party platforms. This matters because you now have much clearer information about your data rights and how your information may be shared with or collected by third parties.

Consumer Impact (what this means for users)

Disney+ has replaced a minimal subscription page with a full privacy policy that details how your personal data is collected across streaming, physical locations like theme parks and cruise ships, and third-party platforms. Importantly, the policy clarifies that when you use Disney+ through a third-party app or platform, that third party collects data under its own privacy rules — not Disney's. You can review the full privacy policy at Disney+ and check your privacy settings on any third-party platform you use to access Disney+ to understand how your data is handled there.

Obligation Changes (what shifted)

3
New obligations
1
Expanded
Consumers Added

If you use Disney+ through a third-party app, that app collects your data by its own rules — Disney's privacy policy does not protect that data.

Consumers Added

Disney collects and processes your personal information not just online but also when you visit its parks, resorts, and ships, or call customer service.

+ 2 more obligation changes. Full breakdown available with Watcher.

Unlock — $9.99/mo →

Applicable regulations

CCPA/CPRA
California, USA
COPPA
United States Federal
CFAA
United States Federal
CAN-SPAM
United States Federal
DSA
European Union
GDPR
European Union
UK GDPR
United Kingdom

Why It Matters (compliance & risk perspective)

The new policy significantly expands the disclosed scope of data collection beyond streaming activity to include physical Disney properties and third-party platforms, meaning your data may be collected and used in more contexts than you previously understood. Understanding these distinctions is important for making informed choices about how and where you interact with Disney services.

Key Clauses Affected

Third-Party Platform Data Collection Disclaimer

Disney+ now explicitly states that data collected by third-party platforms when you use Disney+ through their apps is governed by those platforms' own privacy rules, not Disney's policy.

Offline Data Collection Scope

The policy now discloses that Disney collects personal information at physical locations including theme parks, resorts, cruise ships, and call centers.

Supplemental Regional and Product Notices

Disney+ reserves the right to issue additional privacy notices for specific products or regions, meaning users may need to consult multiple documents to understand their full data rights.

Full clause-by-clause analysis available with Watcher.

Evidence Verification

✓ Verified
Previous Version
827bb44f0610751c1ebbf483b6002c659765388c160f262c5c42d232f25db438
March 16, 2026 06:03 UTC
✓ Verified
Current Version
ef85f3b0ec943b1ac85f6c134be4b8c3ade425a748647c09450d73d23e6d243c
April 22, 2026 06:03 UTC
✓ Verified
Change Detected
April 22, 2026 06:03 UTC
How to Cite
ConductAtlas Policy Archive
Entity: Disney+ | Document: Disney+ Privacy Policy | Record: CA-C-000599
Captured: 2026-04-22 06:03:50 UTC
URL: https://conductatlas.com/change/2026-04-22-disney-disney-privacy-policy-599/
Accessed: May 2, 2026

Unlock the full analysis

Institutional analysis Clause breakdown Document redline Citation export
Watcher — $9.99/mo Professional — $149/mo

14-day free trial available.

Institutional Analysis (Compliance & legal intelligence)

Assessment

Disney+ has replaced a non-substantive landing page with a full privacy policy effective April 22, 2026. The policy explicitly addresses multi-jurisdiction data processing, third-party platform data segregation, offline data collection (theme parks, resorts, cruise ships, call centers), and linked site disclaimers. This touches GDPR Art. 13 (transparency obligations), CCPA/CPRA disclosure requirements, and potentially COPPA given Disney's audience demographics. Compliance teams with Disney+ in their vendor stack should assess whether existing DPAs and privacy notices remain accurate. Action is likely required for organizations in regulated sectors or those serving EU/UK users.

Regulatory Exposure

1. GDPR Art. 13 (information to be provided where personal data are collected from the data subject) — the new policy must satisfy transparency requirements for EU users; assess whether the policy meets the specificity required under Art. 13(1)(c) and Art. 13(2)(b) for purposes and legal bases.

🔒

Compliance intelligence locked

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-000599.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Unlock full diff — Watcher $9.99/mo

Document Context

Document
Disney+ Privacy Policy
Entity
Disney+
Captured
April 22, 2026
Source URL
https://www.disneyplus.com/legal/privacy-policy
More from Disney+
Apr 22, 2026 Medium
Disney+ Subscriber Agreement

Disney+ has completely replaced its previous subscriber-facing landing page with a full legal Subscriber Agreement that now covers Disney+, ESPN, …

Stay ahead of policy changes

We monitor 200+ platforms and archive every change — verified and timestamped.