California Attorney General Secures $2.75 Million Settlement with Disney Over CCPA Violations

California’s Attorney General Rob Bonta recently announced a landmark settlement with the Walt Disney Company. This agreement comes in response to allegations that Disney failed to adhere to the California Consumer Privacy Act (CCPA) concerning consumers’ opt-out rights. The $2.75 million settlement represents the largest fine of its kind in the ongoing effort to enforce consumer privacy protections in the state.

Overview of the CCPA and Consumer Rights

The California Consumer Privacy Act (CCPA) is a comprehensive privacy law that grants California residents various rights regarding their personal information. Among these rights, consumers have the ability to opt out of the sale and sharing of their data for purposes such as cross-context behavioral advertising. Businesses are mandated to facilitate these requests by providing straightforward methods for consumers to exercise their rights, ensuring compliance across all platforms.

Key Findings from California’s Investigative Sweep

This settlement follows an Investigative Sweep initiated by the California Department of Justice in January 2024, aimed specifically at the compliance practices of streaming services regarding the CCPA. The investigation revealed that Disney was not honoring consumer opt-out requests consistently across its platforms, including its popular streaming services: Disney+, ESPN+, and Hulu.

Issues with Disney’s Compliance

According to the complaint, Disney’s compliance practices were notably inadequate:

• Inconsistent Opt-Out Processes: Consumers had to submit opt-out requests separately for each Disney service and device, creating unnecessary friction and complexity.
• Lack of Communication: Disney failed to communicate opt-out requests effectively to its third-party advertising partners.
• Redirecting Consumers: Users attempting to opt out of data sales through Disney’s TV streaming apps were unwittingly redirected to external websites to complete the process, further complicating their requests.

These practices violated the CCPA’s requirements, which stipulate that opt-out requests should be simple, effective, and accessible.

Implications of the Settlement

Attorney General Bonta emphasized the importance of consumer rights in digital spaces, stating, “Consumers shouldn’t have to go to infinity and beyond to assert their privacy rights.” As part of the settlement, Disney is mandated to enhance its compliance practices to ensure that opt-out requests are honored efficiently across all services.

Stricter Compliance Guidelines

The settlement will enforce stricter compliance guidelines for Disney, compelling the company to:

• Simplify the Opt-Out Process: Ensure that opting out of data sales is straightforward, requiring no more than a single request for all services.
• Enhance Communication: Improve how it shares opt-out requests with third-party partners, ensuring that consumer choices are respected across all platforms.

Conclusion

This $2.75 million settlement marks a significant step toward upholding consumer privacy rights in the digital age. As businesses increasingly rely on personal data for advertising revenue, compliance with laws like the CCPA is crucial. This landmark case against Disney serves as a reminder that companies must prioritize transparent and effective privacy practices to protect consumer rights.

For more information on consumer privacy rights and the California Consumer Privacy Act, visit the California Attorney General’s official website and learn about your rights to privacy in the digital world.