Disney provides a separate US State Privacy Rights Notice that gives residents of certain states, including California, additional rights to access, delete, correct, or opt out of the sale or sharing of their personal information.
This analysis describes what Disney+'s agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California and other US state residents have legally enforceable rights to control how Disney uses their data, including the right to opt out of data sales and targeted advertising, but exercising these rights requires taking action through a separate notice and process.
Interpretive note: The specific content and scope of the supplemental US State Privacy Rights Notice is not reproduced in the document text provided; the adequacy of the rights mechanisms described therein cannot be fully assessed from this excerpt.
Disney+ now explicitly discloses that it collects and processes personal information not only when you use its digital services, but also when you visit Disney physical properties like theme parks, stores, resorts, and cruise ships, or call Disney guest centers. The updated policy clarifies that if you use Disney+ through a third-party platform (such as a mobile app store or smart TV ecosystem), that platform may separately collect your information independently of Disney+, and any privacy settings you configure on that third-party platform will not restrict how Disney+ itself uses the data it collects directly. You can review Disney+'s expanded privacy policy to understand what specific information is collected in physical properties and offline channels, and consider which data collection touchpoints apply to your use of Disney services.
View change record →If you live in California or another US state with privacy laws, you have rights beyond those described in the main policy, and you should review the US State Privacy Rights Notice to understand how to exercise them, including requesting data deletion or opting out of advertising data sharing.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
Not be Discriminated Against by us for exercising your privacy rights.
"In some cases, we may provide additional data privacy notices specific to certain products, practices, or regions. Those terms are to be read in conjunction with this policy.Excerpt from Disney+'s Privacy Policy
REGULATORY LANDSCAPE: The supplemental US State Privacy Rights Notice engages CCPA/CPRA (California), Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, and other state privacy frameworks.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
California and other US state residents have legally enforceable rights to control how Disney uses their data, including the right to opt out of data sales and targeted advertising, but exercising these rights requires taking action through a separate notice and process.
If you live in California or another US state with privacy laws, you have rights beyond those described in the main policy, and you should review the US State Privacy Rights Notice to understand how to exercise them, including requesting data deletion or opting out of advertising data sharing.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Disney+.