Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Disney collects date of birth and other registration data, which can be used to identify users who may be minors, triggering specific legal protections around data collection from children.
This analysis describes what Disney+'s agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Disney's services are popular with children, and the collection of date of birth and other personal details from minors is subject to COPPA in the US, which requires verifiable parental consent before collecting personal information from users under 13.
Interpretive note: The document excerpt does not fully detail the children's consent mechanism; the COPPA and children's data implications are inferred from the collection of date of birth and the nature of the Disney+ platform.
Disney+ now explicitly discloses that it collects and processes personal information not only when you use its digital services, but also when you visit Disney physical properties like theme parks, stores, resorts, and cruise ships, or call Disney guest centers. The updated policy clarifies that if you use Disney+ through a third-party platform (such as a mobile app store or smart TV ecosystem), that platform may separately collect your information independently of Disney+, and any privacy settings you configure on that third-party platform will not restrict how Disney+ itself uses the data it collects directly. You can review Disney+'s expanded privacy policy to understand what specific information is collected in physical properties and offline channels, and consider which data collection touchpoints apply to your use of Disney services.
View change record →If a child under 13 uses Disney+, specific legal requirements apply to how their personal information is collected and used; parents should be aware that providing date of birth during registration is used to identify minor users and trigger applicable protections.
How other platforms handle this
In certain circumstances, the right to data portability, which means that you can request that we provide certain Personal Data we hold about you in a machine-readable format
If you want to see what information we have collected about you, you can request a copy of your data in the Data & Privacy section of your User Settings. You should receive your data packet within 30 days.
Monitoring
Disney+ has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Registration information you provide when you create an account, enter a promotion, or link your profile on a third-party site or platform with your registration account, such as your first name and surname, country of residence, gender, date of birth, email address, username, and passwordExcerpt from Disney+'s Privacy Policy
REGULATORY LANDSCAPE: The collection of date of birth and personal information from users who may be minors implicates the Children's Online Privacy Protection Act (COPPA) in the US, which requires verifiable parental consent before collecting personal information from children under 13. The FTC is the primary COPPA enforcement authority. In the EU, GDPR Article 8 requires parental consent for children under 16 (with member state variation down to 13) for information society services. The UK Children's Code (Age Appropriate Design Code) imposes additional obligations for services likely to be accessed by children. GOVERNANCE EXPOSURE: High. Disney's platforms are among the most prominent children's entertainment brands globally, creating heightened regulatory scrutiny of children's data practices. The FTC has previously enforced COPPA against streaming and entertainment platforms. Inadequate parental consent mechanisms or collection of children's data beyond what is necessary for the service creates material enforcement risk. JURISDICTION FLAGS: US (COPPA, FTC enforcement), EU/EEA (GDPR Article 8, national implementation variations), UK (UK GDPR and Children's Code), California (CPRA minor-specific provisions, California Age-Appropriate Design Code Act). The California Age-Appropriate Design Code Act imposes specific requirements for services likely to be accessed by users under 18. CONTRACT AND VENDOR IMPLICATIONS: Third-party service providers and advertising partners who receive data from Disney platforms must be contractually prohibited from using children's data for behavioral advertising, in line with COPPA requirements. Data processing agreements with vendors should explicitly address children's data handling. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that age-gating and parental consent mechanisms are technically effective and legally sufficient under COPPA and applicable international children's privacy laws. The policy's children's data provisions should be reviewed against the California Age-Appropriate Design Code Act requirements. Data minimization practices for minor user profiles should be audited.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Disney's services are popular with children, and the collection of date of birth and other personal details from minors is subject to COPPA in the US, which requires verifiable parental consent before collecting personal information from users under 13.
If a child under 13 uses Disney+, specific legal requirements apply to how their personal information is collected and used; parents should be aware that providing date of birth during registration is used to identify minor users and trigger applicable protections.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Disney+.