Disney agrees to pay $2.75M to settle California AG Rob Bonta's 2024 lawsuit alleging it violated the CCPA by failing to honor consumers' data opt-out requests
Context & Ripple Effects
California’s privacy enforcement arc includes the Sephora CCPA settlement over data-sale disclosures, an early signal that the state would pursue consumer-data compliance cases. Disney now joins that enforcement record over opt-out handling.
The settlement also follows Disney’s separate FTC settlement over children’s data on YouTube, making data-governance compliance a recurring legal issue for the company across different regulators and audiences.
First-order effects
- Disney will pay $2.75 million to resolve California AG Rob Bonta’s 2024 CCPA lawsuit, closing the stated dispute over alleged failures to honor consumer opt-out requests.
- The agreement reinforces California’s ability to obtain monetary settlements in cases centered on the practical execution of CCPA consumer choices.
Second-order effects
- Companies subject to the CCPA face added pressure to test whether their opt-out mechanisms work consistently across the consumer-data flows they operate, rather than treating disclosure as the only compliance question.
- For Disney, the California resolution adds to scrutiny created by its earlier FTC children’s-data settlement, increasing the importance of coordinated privacy controls across its businesses.
Third-order effects
- If California continues to bring cases over how consumer requests are implemented, CCPA compliance may increasingly be judged by operational evidence of honoring choices, not just published privacy policies.
- The pattern points toward privacy enforcement that spans distinct data-risk categories—consumer opt-outs and children’s data—raising the compliance value of unified governance at large media and platform companies.
The trend: State and federal privacy enforcement is increasingly testing whether companies’ data practices deliver the consumer protections their policies and interfaces promise.