Data Report Card · Disney+
Disney+ Data Report Card
Streaming · The Walt Disney Company
§ Enforcement action
Data
Practices
Practices
2Access1Portability1Friction2Deletion0Sells1Trains AI
=
D
§
5/12
Agent
Readiness
Readiness
2Access
1Portability
0API access
=
C
3/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
§ This grade reflects a 2-point deduction (severity 1) for a verified regulatory action: 7/12 on data practices − 2 = 5/12 → D. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Disney+'s published policy; none has been tested (run by us) yet.
2Accessstated
Disney states you have the right to know and access the personal information it has collected about you, submitted at usprivacy.disney.com or by phone at (877) 466-6669.
The Walt Disney Privacy Center — Your US State Privacy Rights · accessed Jun 2026 ↗1Portabilitystated
Disney states a right to "access your personal information in a portable format," but does not document multiple confirmed structured machine-readable export formats (e.g. JSON plus CSV) for a self-serve download, so portability is scored at the single-format level.
The Walt Disney Privacy Center — right to data portability · accessed Jun 2026 ↗1Frictionstated
Rights are exercised through the usprivacy.disney.com request portal (a OneTrust web form) rather than a one-click in-product control, placing friction at the moderate level.
The Walt Disney Privacy Center — how to submit a request · accessed Jun 2026 ↗2Deletionstated
Disney states a right to request deletion of the personal information it has collected, and Disney+ supports account deletion in the Help Center, so deletion is scored at the full level.
Disney+ Help Center — Deleting my Disney+ account · accessed Jun 2026 ↗0Sells / sharesstated
Disney offers a "Do Not Sell or Share My Personal Information" opt-out and acknowledges third-party advertising collection may be a sale or sharing under state law, but in February 2026 the California Attorney General announced a $2.75M settlement (the largest CCPA settlement in state history) finding Disney failed to honor consumer opt-outs and kept selling and sharing data across Disney+, ESPN+, and Hulu; this verified enforcement keeps it at the lowest level.
California DOJ — $2.75M CCPA settlement with Disney (Feb 2026) · accessed Jun 2026 ↗1Trains AIstated
Disney uses viewing behavior and account data for internal personalization and recommendations rather than to train generative AI models, and does not state it uses your personal data to train AI shared beyond the service, so model-training use is scored at the partial level.
The Walt Disney Privacy Center — personalization and recommendations · accessed Jun 2026 ↗§Enforcement action — deducts 2 points (severity 1); data practices without the penalty scored C (7/12)verified
California's Attorney General reached a $2.75 million CCPA settlement with Disney in February 2026 for failing to honor consumers' opt-out requests across Disney+, ESPN+, and Hulu.
California Attorney General · Feb 2026 ↗0API access — feeds Agent Readiness, not the /12stated
Disney offers no consumer-grantable OAuth API for an agent to fetch your own personal account data; the self-data path is the manual usprivacy.disney.com request portal, so agent access is scored at the lowest level.
The Walt Disney Privacy Center — request portal (manual, no consumer API) · accessed Jun 2026 ↗Reviewed Jun 2026. The Walt Disney privacy center US State Privacy Rights page was read directly; Disney+ rights run through Disney's unified privacy infrastructure (usprivacy.disney.com). The Sells cell is shaped by a verified regulatory finding: in February 2026 California's Attorney General announced a $2.75M settlement (the largest CCPA settlement in state history) over Disney's failure to honor opt-outs of data sale and sharing across Disney+, ESPN+, and Hulu, corroborated via the CA DOJ press release.
How to request your data from Disney+
- Go to https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/your-us-state-privacy-rights/ — Disney+'s data-request entry point.
- usprivacy.disney.com request portal (access / delete / correct); phone (877) 466-6669; Do Not Sell or Share opt-out.
- Expected wait: access / deletion via the Disney privacy request portal; account deletion in the Disney+ Help Center — Disney+'s stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact The Walt Disney Company — US Privacy Requests: https://help.disneyplus.com/article/disneyplus-delete-account.
These steps reflect Disney+'s documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.