Provision record
Disney+ · Walt Disney Company Privacy Policy · View original document ↗

Targeted Advertising via Identifier and Hashed Email Sharing

Medium severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Disney+ and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The policy authorizes sharing of device identifiers or hashed email addresses with third-party advertising partners to deliver and measure targeted advertising both on Disney's own platforms and on external third-party sites and applications.

This analysis describes what Disney+'s agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes a data sharing mechanism that extends beyond Disney's own platforms to third-party advertising ecosystems, using identifiers and hashed email addresses as linkage data. Under California law, this type of sharing may constitute a 'sale' or 'sharing' of personal information for cross-context behavioral advertising purposes, which triggers CCPA opt-out rights.

Clause Stability Stable

0
Changes
3
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

Under this clause, device identifiers or hashed email addresses may be transmitted to third-party advertising partners to enable targeted advertising based on user activity, both on Disney properties and on non-Disney websites and applications. Users can opt out of this data sharing through the 'Do Not Sell or Share My Personal Information' link in Disney website footers or app settings.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Navigate to any Disney website footer or application settings and click 'Do Not Sell or Share My Personal Information' or 'Your Privacy Controls' to opt out of targeted advertising data sharing.

Cross-platform context

See how other platforms handle Targeted Advertising via Identifier and Hashed Email Sharing and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
When we provide you with relevant advertising on third-party sites and applications, we may share limited personal information about you, such as certain identifiers or hashed email address, with third parties. We may also share such information to provide you with and to measure relevant third-party advertising on our sites and applications.

Excerpt from Disney+'s Walt Disney Company Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: This provision engages CCPA's definitions of 'sharing' for cross-context behavioral advertising for California residents, GDPR's consent and legitimate interest requirements for EU and UK users in the context of third-party cookie and …

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
Walt Disney Company Privacy Policy
Entity
Disney+
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
July 9, 2026
Record ID
CA-P-015940
Document ID
CA-D-00575
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
00f1d01d84ae9b8dd3f1666ae7de8d1a893a5ebc987b1f6d661ef14d92b34703
Analysis generated
May 8, 2026 08:25 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Disney+
Document: Walt Disney Company Privacy Policy
Record ID: CA-P-015940
Captured: 2026-05-08 08:25:00 UTC
SHA-256: 00f1d01d84ae9b8d…
URL: https://conductatlas.com/platform/disney/walt-disney-company-privacy-policy/provision/CA-P-015940/targeted-advertising-via-identifier-and-hashed-email-sharing/
Accessed: Aug. 26, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Disney+'s Targeted Advertising via Identifier and Hashed Email Sharing clause do?

This provision establishes a data sharing mechanism that extends beyond Disney's own platforms to third-party advertising ecosystems, using identifiers and hashed email addresses as linkage data. Under California law, this type of sharing may constitute a 'sale' or 'sharing' of personal information for cross-context behavioral advertising purposes, which triggers CCPA opt-out rights.

How does this clause affect you?

Under this clause, device identifiers or hashed email addresses may be transmitted to third-party advertising partners to enable targeted advertising based on user activity, both on Disney properties and on non-Disney websites and applications. Users can opt out of this data sharing through the 'Do Not Sell or Share My Personal Information' link in Disney website footers or app settings.

Is ConductAtlas affiliated with Disney+?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Disney+.