This is Disney+'s privacy policy, which explains what personal information Disney collects about you — including your viewing history, location, device data, voice recordings, and purchase history — and how it shares that information across all Disney brands and with third-party advertisers. The most important thing to know is that Disney shares your personal data across the entire Walt Disney Family of Companies and with external advertising and analytics partners, meaning your Disney+ streaming behavior can influence ads you see across Disney's many other properties. You can visit https://privacychoices.thewaltdisneycompany.com/ to manage your communication and data-sharing preferences.
This document is Disney+'s global privacy policy, governed by applicable law in each jurisdiction where The Walt Disney Family of Companies operates, covering data processing across digital platforms, physical properties (theme parks, stores, cruise ships), and third-party applications. The policy obligates Disney to collect, use, and share a broad range of personal information — including registration data, transaction records, location data, device identifiers, viewing history, voice data, and biometric-adjacent information — for purposes spanning service delivery, targeted advertising, analytics, and cross-brand profiling within the Walt Disney Family of Companies. Notably, the policy permits data sharing with a wide array of third parties including advertisers, data analytics providers, co-branded partners, and social media platforms, and explicitly states that privacy choices made on third-party platforms do not carry over to Disney's own data collection, creating a material gap in user consent expectations. The policy engages GDPR (EU/EEA users), CCPA/CPRA (California residents), COPPA (users under 13), and various other regional frameworks, with Disney's OneTrust-based consent management system serving as the primary compliance mechanism. Material compliance considerations include the breadth of the Walt Disney Family of Companies data-sharing network, the collection of sensitive data categories (voice, location, viewing behavior), and the cross-context behavioral advertising practices that may require opt-out mechanisms under CPRA and similar state laws.
🔒 Institutional analysis locked
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Upgrade to Professional — $149/mo1 change analyzed since monitoring began.
Cross-platform context
See how other platforms handle Broad Categories of Personal Data Collected and similar clauses.
Compare across platforms →