MAGIC MEETS COMPLIANCE: California AG Drops The Hammer On Disney, Securing The Largest CCPA Settlement Yet At $2.75 Million.

California Attorney General Rob Bonta secured a $2.75 million settlement with Disney for allegedly violating the California Consumer Privacy Act (CCPA) by failing to fully honor consumers’ requests to opt-out of the sale or sharing of their data across its streaming services – Disney+, Hulu, and ESPN+. The Attorney General’s investigation revealed that Disney’s opt-out methods were fragmented, requiring consumers to submit multiple requests and lacking functionality on connected-TV apps.

Disney will be required to implement operational changes, including providing clear notice about data practices, a simplified opt-out process, and account-wide enforcement of opt-out requests. A three-year compliance monitoring program is also mandated. This settlement, the largest CCPA settlement to date, follows a previous $530,000 settlement with Sling TV and Dish Media Sales LLC.

The Attorney General’s office emphasizes that companies must fully operationalize consumer rights across their entire ecosystem, moving beyond merely providing formal mechanisms. The message is clear: systems capable of tracking users across devices must also be capable of respecting their privacy choices, with no excuses for vendor issues or partial compliance. The outcome is seen as a positive step towards stronger privacy norms, signaling that even industry leaders are adapting to evolving expectations.

(Source：National Law Review)