California residents and users in other US states with privacy laws have specific rights regarding their personal information held by Disney, including rights to know, delete, correct, and opt out of data sale or sharing.
If you are a California resident, you have the right to know exactly what personal data Disney holds about you, request its deletion, correct inaccuracies, and opt out of the sale or sharing of your data for targeted advertising — and Disney must respond within 45 days under CPRA.
Cross-platform context
See how other platforms handle California Residents' Privacy Rights (CCPA/CPRA) and similar clauses.
Compare across platforms →California residents have enforceable statutory rights under CPRA to opt out of targeted advertising data sharing, access all personal data Disney holds about them, and request deletion — rights that Disney must honor within specific statutory timeframes.
(1) REGULATORY FRAMEWORK: This provision engages CCPA §1798.100 (right to know), §1798.105 (right to delete), §1798.106 (right to correct), §1798.120 (right to opt out of sale/sharing), §1798.121 (right to limit use of sensitive personal information), and §1798.135 (Global Privacy Control), as amended by CPRA. Enforcement is by the California Privacy Protection Agency and California AG. Colorado CPA, Connecticut CTDPA, Virginia VCDPA, Texas TDPSA, and other state privacy laws provide analogous rights for residents of those states. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.