​AG Bonta today announced a settlement with the Walt Disney Company (Disney), resolving allegations that the company violated the California Consumer Privacy Act (CCPA) by failing to fully effectuate consumers’ requests to opt-out of the sale or sharing of their data across all devices and streaming services associated with consumers’ Disney accounts. Under today’s settlement, Disney must pay $2.75 million in civil penalties and must implement opt-out methods that fully stop Disney’s sale or sharing of consumers’ personal information.

“Consumers shouldn’t have to go to infinity and beyond to assert their privacy rights. Today, my office secured the largest settlement to date under the CCPA over Disney’s failure to stop selling and sharing the data of consumers that explicitly asked it to." – AG Bonta