What can I do about this clause?

{'method': 'WEB_FORM', 'recipient': 'https://privacychoices.thewaltdisneycompany.com/', 'difficulty': 'MODERATE', 'action_type': 'EXPORT_DATA', 'instructions': "Submit a Data Subject Access Request through Disney's privacy portal at https://privacychoices.thewaltdisneycompany.com/ to receive a copy of all personal information Disney holds about you across its brands.", 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': "The FTC has authority to investigate whether Disney's collection of extensive personal data categories — including voice, location, and behavioral data — constitutes unfair or deceptive practices under FTC Act Section 5.", 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this Broad Categories of Personal Data Collected clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Broad Categories of Personal Data Collected — Disney+

Share 𝕏 Share in Share 🔒 PDF

What it is

Disney+ collects a wide range of your personal details when you sign up, make purchases, or contact customer support, including your name, date of birth, email, gender, and payment information.

Consumer impact (what this means for users)

Disney collects your name, date of birth, gender, email, payment details, viewing history, location, device identifiers, and potentially voice data, creating a detailed personal profile that is shared across Disney brands and used for targeted advertising.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Export Your Data

Submit a Data Subject Access Request through Disney's privacy portal at https://privacychoices.thewaltdisneycompany.com/ to receive a copy of all personal information Disney holds about you across its brands.

Cross-platform context

See how other platforms handle Broad Categories of Personal Data Collected and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

The breadth of data categories collected — spanning identity, financial, behavioral, location, and voice data — means Disney builds a comprehensive profile of each user that extends well beyond what is needed to deliver a streaming service.

View original clause language

We collect two basic types of information – personal information (as defined in this policy) and anonymous information (as defined in this policy) – and we may use personal and anonymous information to create a third type of information, aggregate information (also defined in this policy). In particular, we collect: Registration information you provide when you create an account, enter a promotion, or link your profile on a third-party site or platform with your registration account, such as your first name and surname, country of residence, gender, date of birth, email address, username, and password; Transaction information you provide when you request information, contact Guest Services, or purchase, return, request, or exchange a product or service

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: Collection of this breadth of personal data implicates GDPR Art. 5(1)(c) (data minimisation principle) and Art. 9 (special categories — gender and date of birth may be used to infer sensitive characteristics) for EU/EEA users. Under CCPA/CPRA §1798.100, users have the right to know what categories of personal information are collected; the categories listed here must be specifically enumerated in the policy and honored in data subject access responses. COPPA 16 CFR §312.3 applies to collection of data from children under 13, including birth date and location data. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

The FTC has authority to investigate whether Disney's collection of extensive personal data categories — including voice, location, and behavioral data — constitutes unfair or deceptive practices under FTC Act Section 5.
File a complaint →

Provision details

Document information

Document

Disney+ Privacy Policy

Entity

Disney+

Document last updated

April 29, 2026

Tracking information

First tracked

April 27, 2026

Last verified

April 27, 2026

Record ID

CA-P-003352

Document ID

CA-D-00082

Evidence Provenance

Source URL

https://www.disneyplus.com/legal/privacy-policy

Wayback Machine

View archived versions →

SHA-256

4f1f2a11a74a794c334528c41797e6e7f43e12c1fd0ba95f008d7b0189989ec1

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Disney+ | Document: Disney+ Privacy Policy | Record: CA-P-003352
Captured: 2026-04-27 12:06:39 UTC | SHA-256: 4f1f2a11a74a794c…
URL: https://conductatlas.com/platform/disney/disney-privacy-policy/broad-categories-of-personal-data-collected/
Accessed: May 2, 2026

Classification

Severity

High

Broad Categories of Personal Data Collected