On February 11, 2026, The Walt Disney Company agreed to a civil penalty of $2.75 million to resolve allegations brought by the California Attorney General, Rob Bonta. The settlement addresses violations of the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), specifically regarding the company’s failure to fully effectuate consumer opt-out requests across its streaming platforms, including Disney+, Hulu, and ESPN+. This penalty represents the largest CCPA-specific settlement in California history, surpassing the $1.2 million judgment against Sephora in 2022 and the $530,000 settlement with Sling TV in October 2025. The enforcement action concludes a two-year investigation that began with an investigative sweep of the streaming sector in January 2024.

The financial metrics of this settlement, while modest relative to Disney’s $90 billion annual revenue, establish a critical legal pricing floor for data privacy violations in the streaming sector. The $2.75 million figure is a civil penalty, but the operational costs mandated by the injunctive terms are significantly higher. The settlement requires Disney to overhaul its data governance architecture to ensure "frictionless" opt-outs.