Disney can share your personal information across all its affiliated companies and with business partners for promotions and other purposes, as well as with service providers who handle data on Disney's behalf.
This analysis describes what Disney+'s agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Sharing data across Disney's full family of companies, which includes ABC, ESPN, Hulu, Marvel, Lucasfilm, and others, means data collected in one context can be used in many others without requiring separate consent for each entity.
Personal information you provide to Disney+ may be shared with other Disney-owned companies and business partners for promotional and advertising purposes, broadening the reach of your data beyond the specific service you enrolled in.
How other platforms handle this
We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We may also share your personal data with advertising partners to display relevant advertising to y...
In order to provide you with services, Valve needs to share some data with the publisher or developer of the game (for example to verify your ownership of the game and register your Steam ID with the publisher), or with other third parties that Valve works with to provide services to you. Valve will...
Zoom may share personal data with third-party advertising partners and analytics providers to deliver targeted advertising and measure the effectiveness of advertising campaigns. This may include sharing identifiers, device information, and behavioral data with partners such as advertising networks.
Monitoring
Disney+ has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may share information about you within The Walt Disney Company family of companies (Affiliates) and with our business partners so that they can send you promotional communications, and for other purposes set out in this Privacy Policy. We may also share your information with service providers that perform services on our behalf, including data analytics companies, advertising companies, payment processors, and other service providers.— Excerpt from Disney+'s Disney Privacy Policy
REGULATORY LANDSCAPE: Intra-group data sharing across affiliated companies engages GDPR's data controller and data processor framework for EU/EEA users; each affiliate receiving personal data as a controller must have an independent lawful basis for processing. CCPA and CPRA treat affiliated companies as separate businesses for purposes of sale and sharing disclosures in some contexts. The FTC's jurisdiction covers deceptive practices related to data sharing representations. GOVERNANCE EXPOSURE: Medium. The policy's authorization of broad sharing across Disney's affiliate network and with 'business partners' for promotional purposes is a common industry practice, but the breadth of Disney's affiliate network creates operational complexity in ensuring consistent privacy standards across all entities receiving data. The distinction between service providers (who act on Disney's behalf) and business partners (who may be independent controllers) is significant under CCPA and CPRA. JURISDICTION FLAGS: EU/EEA users require that each Disney affiliate receiving their data has an independent lawful basis for processing under GDPR. California residents have the right to know about and opt out of sharing with business partners where such sharing qualifies as a 'sale' or 'sharing' under CPRA. Cross-border transfers to affiliates outside the EEA require Standard Contractual Clauses or equivalent transfer mechanisms. CONTRACT AND VENDOR IMPLICATIONS: B2B partners receiving data under this provision should be assessed to determine whether they qualify as processors or independent controllers. Service provider agreements should include CCPA-compliant provisions restricting use of data to specified business purposes. Affiliate data sharing agreements should be reviewed for GDPR adequacy. COMPLIANCE CONSIDERATIONS: Compliance teams should maintain an up-to-date record of all affiliates and business partners receiving personal data; verify that intra-group data transfers comply with GDPR transfer requirements; confirm that the CPRA distinction between service providers, contractors, and third parties is accurately reflected in data sharing agreements; and review whether promotional communications sent on behalf of affiliates comply with applicable marketing consent requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Sharing data across Disney's full family of companies, which includes ABC, ESPN, Hulu, Marvel, Lucasfilm, and others, means data collected in one context can be used in many others without requiring separate consent for each entity.
Personal information you provide to Disney+ may be shared with other Disney-owned companies and business partners for promotional and advertising purposes, broadening the reach of your data beyond the specific service you enrolled in.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Disney+.