Depending on your location, you may have the right to see, copy, correct, delete, or restrict use of your personal data, and to opt out of it being sold or shared with advertisers.
This analysis describes what Disney+'s agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are only available in certain jurisdictions, primarily California, EU/EEA states, and a growing number of US states; users in other locations may have fewer or no enforceable rights under this policy.
If you live in California, the EU, UK, or another jurisdiction with applicable privacy law, you can request access to, correction of, or deletion of your Disney personal data by submitting a request through Disney's Privacy Rights Center; users in other jurisdictions may have limited or no enforceable rights under this policy.
How other platforms handle this
We are committed to maintaining your trust, and while we do not sell your personal information or share your personal information with third parties for purposes of cross-context behavioral advertising where restricted by applicable law, we want you to understand when and with whom we may share the ...
Depending on your location, you may have the following rights with respect to your personal data: the right to access your personal data; the right to correct inaccurate personal data; the right to request deletion of your personal data; the right to data portability; the right to restrict or object...
Depending on where you live, you may have the right to access the personal data we hold about you, to request its correction or deletion, to receive a copy of your data in a portable format, to object to certain processing, and to withdraw consent where processing is based on consent. To exercise yo...
Monitoring
Disney+ has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Depending on where you live, you may have certain rights with respect to your personal information, including: The right to know what personal information we have collected about you; The right to receive a copy of your personal information (data portability); The right to have your personal information corrected or updated; The right to have your personal information deleted; The right to opt out of the sale or sharing of your personal information; The right to limit our use of sensitive personal information.— Excerpt from Disney+'s Disney Privacy Policy
REGULATORY LANDSCAPE: The rights enumerated in this provision correspond to GDPR Articles 15-21 (for EU/EEA users), CPRA rights for California residents (access, deletion, correction, portability, opt-out of sale and sharing, and limitation of sensitive data use), and analogous rights under UK GDPR, LGPD, and state privacy laws in Colorado, Connecticut, Virginia, Texas, and others. Enforcement authority varies by jurisdiction: EU national data protection authorities and the UK ICO for European users; the California Privacy Protection Agency and California AG for California residents; and other state AGs for their respective states. GOVERNANCE EXPOSURE: Medium. The policy acknowledges that rights availability depends on jurisdiction, which is accurate but may create confusion for users who are uncertain of their rights. The operational challenge is ensuring that rights fulfillment mechanisms (identity verification, response timelines, and data retrieval) function consistently across all Disney services and geographies. CPRA imposes specific timelines for rights responses (generally 45 days with one extension) and prohibits denial of service based on rights exercise. JURISDICTION FLAGS: California residents have the strongest and most operationally specific rights under CPRA. EU/EEA users have GDPR rights with strict response timelines and DPA oversight. UK users are protected by UK GDPR. Users in US states with comprehensive privacy laws have varying rights frameworks. Users in jurisdictions without applicable law may have limited recourse. CONTRACT AND VENDOR IMPLICATIONS: Service providers and processors who hold personal data on Disney's behalf must be contractually required to assist Disney in fulfilling rights requests, particularly deletion requests that require data removal from vendor systems. Data processing agreements should specify response obligations and timelines. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the Privacy Rights Center is accessible to all covered users and functions correctly for each rights type; confirm that identity verification processes are calibrated to be neither overly burdensome nor insufficiently robust; ensure that rights requests propagate to all downstream processors and vendors within required timelines; and review whether the limitation of sensitive personal information use right (CPRA) is technically implemented across all Disney services.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are only available in certain jurisdictions, primarily California, EU/EEA states, and a growing number of US states; users in other locations may have fewer or no enforceable rights under this policy.
If you live in California, the EU, UK, or another jurisdiction with applicable privacy law, you can request access to, correction of, or deletion of your Disney personal data by submitting a request through Disney's Privacy Rights Center; users in other jurisdictions may have limited or no enforceable rights under this policy.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Disney+.