66 Total
13 High severity
40 Medium severity
13 Low severity

Key Facts

What does Disney+ do with certain features on its sites and applications?
Disney+ age-gates certain features on its sites and applications so that they are not available for use by children.
Does Disney+ share personal information in connection with the sale of a business or enforcement of its Terms of Use?
Disney+ shares personal information with third parties in connection with the sale of a business, enforcement of its Terms of Use or rules, safety and security of guests and third parties, compliance with legal process, or where Disney+ believes in good faith that disclosure is required by law.
What does Disney+ share with third parties?
Disney+ may share limited personal information about you, such as certain identifiers or hashed email address, with third parties.
Does Disney+ share personal information about you with third parties?
Disney+ may share limited personal information about you, such as certain identifiers or hashed email address, with third parties.
Does Disney+ obtain consent from parents for the collection of personal information from their children?
Disney+ obtains consent from parents for the collection of personal information from their children, in accordance with applicable law and its practices.
From whom does Disney+ obtain consent for the collection of personal information from children?
Disney+ obtains consent from parents for the collection of personal information from their children, in accordance with applicable law and its practices.
What location information does Disney+ collect?
Disney+ collects location information, including precise or approximate location information, from a mobile or other device interacting with its sites, applications, or physical properties, or associated with a user's IP address.
Does Disney+ collect location information from a mobile or other device interacting with its sites, applications, or physical properties?
Disney+ collects location information, including precise or approximate location information, from a mobile or other device interacting with its sites, applications, or physical properties, or associated with a user's IP address.
May personal information provided in public forum features be publicly posted and otherwise disclosed without limitation?
Disney+ discloses that personal information provided in public forum features may be publicly posted and otherwise disclosed without limitation as to its use by Disney+ or by a third party.
What may US residents request to opt out of?
Disney+ allows US residents to request to opt out of targeted advertising and/or the sale or sharing of their personal information, as defined under applicable laws and regulations.
Stay ahead of the changes
Track Disney+ and get the diff the day its terms change.
Summary

The Disney+ Privacy Policy explains what information Disney+ collects about you—including your location—how it is used to serve you targeted ads based on activity on Disney+ and other sites, and who it may be shared with, including Disney affiliates, Hulu business partners, and third parties in legal or safety situations. If you are a US resident, you can request to opt out of targeted advertising and the sale or sharing of your personal information. Be aware that anything you post in a public forum on Disney+ can be used without restriction by Disney+ or anyone else.

Analysis

The Disney+ Privacy Policy establishes the conditions under which Disney+ collects, uses, retains, and shares users' personal information. It authorizes collection of precise and approximate location data across digital and physical touchpoints, delivers targeted advertising based on activity both within and outside the Disney+ ecosystem, and permits sharing of personal information with Walt Disney Family of Companies affiliates for their own independent purposes, third-party business partners in connection with Hulu service operations, and external parties in circumstances including business sales, legal process, safety, and good-faith beliefs about legal disclosure requirements. US residents hold a right to opt out of targeted advertising and the sale or sharing of their personal information as defined by applicable law, while parental consent is a prerequisite to collection of children's personal information. Personal information submitted to public forum features is disclosed without limitation on subsequent use by Disney+ or third parties, and the policy may be revised with notice provided only for material changes.

What this means for you

Disney+ collects location information passively—including through your device's IP address—and uses your browsing activity across third-party sites to target advertising at you. Your information may be shared with other Walt Disney Family of Companies members for their own independent purposes, as well as with Hulu's business partners and external parties in a broad range of circumstances, some determined unilaterally by Disney+. Information you submit in public forum features carries no use restrictions once posted. Disney+ keeps your data for as long as needed to fulfill stated purposes, with an extension permitted when law requires or allows it. If you are a US resident, you can submit a request to opt out of targeted advertising and/or the sale or sharing of your personal information.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

2 versions captured · Last updated: April 2026

What changed Disney+ added 64 sentences to its privacy policy on April 22, 2026, significantly expanding the scope and clarity of what information it collects and how it processes it. The new language explicitly states that the policy now covers data collected both online (on Disney+ sites and apps) and offline (in stores, theme parks, resorts, and cruise ships), and clarifies how Disney+ data collection interacts with third-party platforms and sites. The change makes clear that third-party sites may separately collect your information, that Disney+ privacy choices made on those platforms won't automatically apply to Disney+'s direct collection, and that Disney+ isn't responsible for other sites' privacy practices.
Why this matters Disney+ now explicitly discloses that it collects and processes personal information not only when you use its digital services, but also when you visit Disney physical properties like theme parks, stores, resorts, and cruise ships, or call Disney guest centers. The updated policy clarifies that if you use Disney+ through a third-party platform (such as a mobile app store or smart TV ecosystem), that platform may separately collect your information independently of Disney+, and any privacy settings you configure on that third-party platform will not restrict how Disney+ itself uses the data it collects directly. You can review Disney+'s expanded privacy policy to understand what specific information is collected in physical properties and offline channels, and consider which data collection touchpoints apply to your use of Disney services.
View full change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

66 provisions
12 featured
10 clause types
13 high severity
Restricted or Prohibited Content/Industries 1 1 high
Stay ahead of the changes

Monitoring

Disney+ has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Age-gating of features for children and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
COPPA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 22, 2026 06:03 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000082
Version ID CA-V-001912
SHA-256 ef85f3b0ec943b1ac85f6c134be4b8c3ade425a748647c09450d73d23e6d243c
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans