Disney Facial Recognition Lawsuit Accuses ‘Happiest Place on Earth’ of Unlawfully Collecting Park Visitors’ Facial Scans

A proposed class action lawsuit alleges that Disney has surreptitiously deployed facial recognition technology at the entrances of its Disneyland and California Adventure theme parks to collect and track visitors’ biometric data, including the biometrics of children, without meaningfully allowing guests to opt out.

The 29-page lawsuit states that Disney began to deploy facial recognition tech at its California theme parks around April 28, 2026, in an apparent effort to prevent fraud and the re-entry of guests without valid admission. However, the suit alleges that Disney has failed to clearly notify visitors that the technology is in use and has not explained to consumers how their private biometric data is being collected, stored or processed.

The complaint cites a recent LA Times report that revealed the rollout of the technology and claimed that Disney converts guests’ facial images into “unique numerical values” that can be used later to identify returning visitors when they enter the park.

Although the entertainment conglomerate claims that it only retains facial data for 30 days, the lawsuit questions this representation, given that the data is ostensibly compared to when guests first bought tickets or used annual passes to enter the theme parks, which could exceed the 30-day window.

“Guests should be able to expressly opt in to this type of sensitive facial recognition technology with written consent – the onus of privacy rights should not be on the victim,” the filing states. “Given how sensitive facial recognition data is, explicit written consent should be required to protect the privacy [of] guests at Disney Theme Parks[.]”

Disney facial recognition lawsuit highlights privacy risks tied to biometric data

According to the complaint, facial recognition technology works by analyzing a person’s face and generating a “unique faceprint” based on their specific facial geometry and features, similar to a fingerprint. The case explains that this technology measures numerous specific facial details, including distance between the nose and mouth, cheekbone definition, eye socket depths, lip shape, and facial contours.

The class action lawsuit claims that Disney can combine facial-scan data with the other personally identifiable information it collects about a consumer as part of its business, such as information on their payment methods, to compile a “vast repository” of information on their purchases, habits, certain medical services and more.

The Disney lawsuit argues that facial recognition falls under the broader category of biometric technology, which is protected under numerous state laws amid the “growing risks and proliferation of identifying people by their unique biological characteristics.”

Per the complaint, states such as Illinois, Washington, Nevada and Texas have enacted robust biometric privacy laws to give citizens a meaningful opportunity to avoid data-collection practices pertaining to their biometric identifiers.

Crucially, the suit alleges that Disney claims not to collect biometric information from visitors from those states “for other Disney purposes” or offer certain services there.

Disney facial recognition notices can be “very easy to miss,” suit says

According to the lawsuit, Disney has placed “small signs” along the security checkpoints of the entryways into its California parks to disclose its use of facial recognition technology.

However, the complaint says the signs are “adorned” with colorful Mickey Mouse shapes that could very easily distract a viewer from the notices’ content, which is meant to inform visitors that their faces may be scanned upon entry.

Of the “dozens” of entrance lines available to guests, only four do not use facial recognition technology, the suit says. Per the complaint, those lines are marked by a sign that depicts a silhouette of a head and shoulders with a slash through it. The lawsuit contends that this does not constitute a “meaningful way” to express a consumer’s ability to opt out of Disney’s facial recognition practices.

As a result, many Disneyland and California Adventure visitors unknowingly consent to the use of the technology rather than intentionally choosing an alternative entrance to the parks.

“Guests, let alone children, cannot make a conscientious choice to avoid having their facial recognition data collected,” the filing contends.

Class action suit says children cannot meaningfully consent to Disney facial scans

According to the complaint, Disney states that it will collect facial scans of children only with parental consent. However, the lawsuit argues that if Disney’s notice and consent procedures are inadequate for adults, children have even fewer protections when their parents or guardians are not affirmatively informed of the biometric data collection.

The lawsuit claims that Disney’s family-focused branding and theme park experiences compound the issue because children—who make up a substantial portion of the park’s visitors—cannot reasonably comprehend what the complaint describes as a “profound invasion of privacy” while navigating attractions designed specifically for them.

Parents, at the same time, reasonably expect a family-oriented theme park to be the “safest place to bring their children and families” for outings, the suit says.

“Disney’s conduct is highly offensive because it violates established social norms,” the complaint asserts. “Consumers do not expect to be surveilled whenever they go into public places including those that are constructed for children and families, especially in light of state laws requiring companies to make adequate disclosures regarding their collection and use of data.”

The lawsuit also references Disney’s $10 million settlement with the Federal Trade Commission in September 2025 over allegations that the company collected the viewing data of children watching kid-directed Disney videos on YouTube without parental consent.

Lawsuit challenges “farce” of Disney data retention policies

The complaint reiterates that although Disney claims that it retains biometric data for only 30 days, this representation is illogical as the company allegedly compares this facial data against images tied to the purchase of tickets or annual passes, which can remain active well beyond 30 days.

The class action suit also questions what ultimately happens to the data Disney collects. According to the case, Disney already collects biometric data from other park attractions, such as the fingerprints used for Disney “Magic Bands” that grant access across parks, or the collection of images throughout the park as part of the “Disney PhotoPass” program.

The lawsuit argues that the linking of this data creates a “highly valuable package of information.”

The complaint claims that Disney has violated Federal Trade Commission guidance and California-specific consumer protection laws through its “surreptitious and unexpected collection” of biometric information without adequately informing consumers of how their facial data would be collected, used or retained.

“…Disney does not disclose the collection of biometric information anywhere in their Privacy Policy – but rather within patchworks of random website pages which offer little clarity as to what Disney is actually doing with Plaintiff and Class members’ biometric information and other privacy rights,” the complaint contends.

The lawsuit further describes this data as a potential “gold mine” for cyberhackers, noting that Disney suffered a “massive data breach” on its systems in 2024.

Disney profits from data collection, plaintiff says

The plaintiff, a California resident, says she visited Disney’s California parks on May 10, 2026 and had her biometric information collected upon entry.

According to the complaint, Disney profits from the technology by using it for automated fraud detection and guest verification, rather than hiring and paying employees to individually validate guests and secure the parks’ premises.

The case argues that Disney’s expansive, synergetic business model and “ubiquitous presence” in American culture have fueled its desire to monetize consumer data across multiple lines of business.

“Disney’s theme park business has grown into a leviathan within its industry – and so has its hunger for personal data on the visitors who enter into the Disney Theme Parks,” the complaint alleges.

Who does the Disney facial recognition lawsuit look to cover?

The Disney facial recognition class action lawsuit looks to cover all individuals who had their facial recognition captured, stored, retained or otherwise used by Disney without consent during the applicable statute of limitations period.

I visited a Disney theme park. How do I join the lawsuit?

Typically, there is nothing a consumer needs to do to join or sign up for a class action lawsuit when it’s first filed. The time to take action typically occurs in the event of a class action settlement, at which point the people covered by the case, called class members, may receive notice of the settlement with instructions on how to submit a claim form for benefits.

If you have visited a Disney theme park and believe your biometric data was collected, or simply want to stay in the know on class action lawsuit and class action settlement news, sign up for ClassAction.org’s free weekly newsletter.

Check out ClassAction.org’s lawsuit list for the latest open class action lawsuits and investigations.