data report card

Data Report Card · Disney+

Disney+ Data Report Card

Streaming · The Walt Disney Company
§ Enforcement action
Data
Practices
2Access1Portability1Friction2Deletion1Sells1Trains AI
=
C
§
6/12
Agent
Readiness
2Access 1Portability 0API access
=
C
3/6

Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?

§ This grade reflects a 2-point deduction (severity 1) for a verified regulatory action: 8/12 on data practices − 2 = 6/12 → C. The enforcement record is below.

Help me make a request →
Reviewed Jun 2026 · policies are checked weekly for changes  ·  stated — every cell is read from Disney+'s published policy; none has been tested (run by us) yet.
2Accessstated
Disney states you have the right to know and access the personal information it has collected about you, submitted at usprivacy.disney.com or by phone at (877) 466-6669.
The Walt Disney Privacy Center — Your US State Privacy Rights · accessed Jun 2026 ↗
1Portabilitystated
Disney states a right to "access your personal information in a portable format," but does not document multiple confirmed structured machine-readable export formats (e.g. JSON plus CSV) for a self-serve download, so portability is scored at the single-format level.
The Walt Disney Privacy Center — right to data portability · accessed Jun 2026 ↗
1Frictionstated
Rights are exercised through the usprivacy.disney.com request portal (a OneTrust web form) rather than a one-click in-product control, placing friction at the moderate level.
The Walt Disney Privacy Center — how to submit a request · accessed Jun 2026 ↗
2Deletionstated
Disney states a right to request deletion of the personal information it has collected, and Disney+ supports account deletion in the Help Center, so deletion is scored at the full level.
Disney+ Help Center — Deleting my Disney+ account · accessed Jun 2026 ↗
1Sells / sharesstated
Disney's US State Privacy Rights page offers a "Do Not Sell or Share My Personal Information" opt-out and acknowledges that third-party advertising collection may be a sale or sharing under state law. The February 2026 California Attorney General settlement over unhonored opt-outs sits in the enforcement record below and deducts from the grade there.
The Walt Disney Privacy Center — Your US State Privacy Rights · accessed Jun 2026 ↗
1Trains AIstated
Disney uses viewing behavior and account data for internal personalization and recommendations rather than to train generative AI models, and does not state it uses your personal data to train AI shared beyond the service, so model-training use is scored at the partial level.
The Walt Disney Privacy Center — personalization and recommendations · accessed Jun 2026 ↗
§Enforcement action — deducts 2 points (severity 1); data practices without the penalty scored C (8/12)verified
California's Attorney General reached a $2.75 million CCPA settlement with Disney in February 2026 for failing to honor consumers' opt-out requests across Disney+, ESPN+, and Hulu.
California Attorney General · Feb 2026 ↗
0API access — feeds Agent Readiness, not the /12stated
Disney offers no consumer-grantable OAuth API for an agent to fetch your own personal account data; the self-data path is the manual usprivacy.disney.com request portal, so agent access is scored at the lowest level.
The Walt Disney Privacy Center — request portal (manual, no consumer API) · accessed Jun 2026 ↗
Reviewed Jun 2026. The Walt Disney privacy center US State Privacy Rights page was read directly; Disney+ rights run through Disney's unified privacy infrastructure (usprivacy.disney.com). Cells rest on Disney's own published statements; the February 2026 California Attorney General settlement over unhonored opt-outs is carried in the enforcement record, which deducts from the grade.

Events

Breaches, policy changes, and export-format changes we’ve recorded at Disney+ — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →

No events on record for Disney+.

Grade history

Every change to this company’s grade since it was first published, and why. All grade changes →

12 Aug 2026Sells / shares your data0→1score

The February 2026 settlement was counted twice: it forced this cell to 0 and also applied the enforcement deduction. Under the two-lane rule — grades rest on a company's own published statements; regulator findings live in the enforcement record — the cell now scores Disney's own stated “Do Not Sell or Share” opt-out, and the settlement remains in the enforcement record, which still deducts. Data practices 7/12 → 8/12; with the −2 enforcement deduction the grade moves D → C. Nothing about the violation left the page; it stopped being billed twice.

The Walt Disney Privacy Center — Your US State Privacy Rights ↗
Previously: California DOJ — $2.75M CCPA settlement with Disney (Feb 2026)

How to request your data from Disney+

  1. Go to https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/your-us-state-privacy-rights/ — Disney+'s data-request entry point.
  2. usprivacy.disney.com request portal (access / delete / correct); phone (877) 466-6669; Do Not Sell or Share opt-out.
  3. Expected wait: access / deletion via the Disney privacy request portal; account deletion in the Disney+ Help Center — Disney+'s stated turnaround (we haven't independently timed a request yet).
  4. No self-serve option, or want a formal request? Contact The Walt Disney Company — US Privacy Requests: https://help.disneyplus.com/article/disneyplus-delete-account.

These steps reflect Disney+'s documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.

Help me make a request →