$2.75M Disney California Attorney General Settlement Marks Largest Consumer Privacy Deal in State History

New to ClassAction.org? Read our Newswire Disclaimer

Disney has agreed to a $2,750,000 settlement to resolve California Department of Justice  (DOJ) allegations that the entertainment behemoth failed to entirely stop the collection and transfer of the data of state residents who opted out of data sharing on Disney’s streaming services, in violation of the California Consumer Privacy Act (CCPA).

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Disney settlement was announced by California Attorney General Rob Bonta via press release on February 11, 2026. Under the deal, Disney must pay $2.75 million in civil penalties and alter its opt-out procedures to “fully effectuate” users’ requests to not sell or share their data across all devices and streaming services associated with their Disney accounts. 

The allegations against Disney arose from an investigation initiated by the California DOJ in January 2024 that sought to evaluate streaming services for potential violations of the California Consumer Privacy Act (CCPA). The state investigation found “key gaps” in Disney’s tracking opt-out methods that allowed the company to continue selling and sharing consumers’ data, per the press release.

“Consumers shouldn’t have to go to infinity and beyond to assert their privacy rights,” Attorney General Bonta said in the press release, emphasizing that a consumer’s privacy rights in the state apply “wherever and however a business sells data.”

Related Reading: Disney Deploys Third-Party Data Trackers on ESPN Website Without User Consent, Class Action Claims

Specifically, the California settlement requires Disney to implement an easy-to-use opt-out procedure that is made clear and conspicuous to the consumer. Should a user complete the opt-out process, Disney must entirely stop selling and sharing their personal data across all associated platforms and on all associated devices.

The deal also covers provisions for the time a consumer is or is not logged into their streaming service accounts operated by Disney. When a consumer is logged in, Disney must effectuate their choice to opt-out, if that is the case, across all of its streaming services associated with their account (e.g. Disney+, Hulu, ESPN+). Similarly, when a consumer is not logged in or does not have an account, Disney must inform them that signing into an account may be required to process their opt-out request.

“Effective opt-out is one of the bare necessities of complying with CCPA,” the press release reads.

The $2.75 million ordered to be paid by Disney is the highest California Consumer Privacy Act settlement to date, according to the California Attorney General.

The Disney deal was preceded by a related $530,000 AG settlement with Sling TV in October 2025 that helped to establish the investigative basis and enforcement actions for CCPA cases against streaming companies to come.

The Disney AG lawsuit claimed that the entertainment company had maintained loopholes in its procedures for opting out of data collection that allowed it to continue to track and sell the private information of Californians, including minors, who use its streaming services, namely Disney+, ESPN+ and Hulu, in violation of the California Consumer Privacy Act.

Check out ClassAction.org’s free legal resources to learn how to start a class action lawsuit.