California's Record-Setting Enforcement Signals Heightened Privacy Oversight

California Attorney General announced on February 11, 2026, a record-setting $2.75 million settlement with The Walt Disney Company for systemic failures to honor consumer opt-out requests across streaming services and digital platforms required under the California Consumer Privacy Act (CCPA). The settlement is the largest to date and marks a clear, escalating pattern of CCPA enforcement across industries.

CCPA Violations

The AG's investigation identified three distinct categories of CCPA non-compliance that left consumers without a comprehensive, one-step opt-out, as required under CCPA.

• Deficient Opt-Out Toggles: When consumers clicked an opt-out toggle within a Disney streaming app, the opt-out applied only to that specific service and then, often, only to that specific device. A consumer watching Disney+ who opted out could still have their data sold through Hulu, ESPN+, or other Disney platforms accessed on different devices – even if they were logged into the same Disney