DISH is the satellite-TV and pay-TV brand of DISH Network Corporation, a wholly owned subsidiary of EchoStar Corporation (Nasdaq: SATS), which also owns Boost Mobile, Sling TV, Hughes/HughesNet, and AirTV. DISH's own privacy notice (effective January 1, 2026) discloses imprecise (IP-based) geolocation collection, session-replay software that logs keystrokes and form entries on its own properties, and named ad-identity partners (The Trade Desk, LiveRamp, Nielsen); its CCPA table self-declares that it sells or shares identifiers, geolocation, commercial information, and internet-activity data with data analytics providers, advertising partners/networks, social media networks, and data brokers, and it discloses information onward to "EchoStar and EchoStar affiliates." EchoStar's FY2025 10-K confirms DISH Network Corporation is EchoStar's wholly owned subsidiary and that EchoStar is controlled by a single principal stockholder (Chairman/President/CEO Charles Ergen). DISH Network Corporation itself disclosed a February 2023 ransomware/cyberattack in an SEC 8-K; a follow-up 10-Q states customer databases were not accessed but employee-related records and a limited number of other records containing personal information were extracted, at roughly $30 million in remediation cost. No FCC or state-AG enforcement action naming DISH specifically was found.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
6 ON FILE
[2026-01-01] · COLLECTION
DISH's Privacy Notice (effective January 1, 2026) lists, in its California notice-at-collection table, the categories of personal information it collects and separately marks as "sold or shared": identifiers (names, postal/email addresses, online identifiers, IP addresses, account names), commercial information, internet/electronic network activity information, and imprecise geolocation data such as general device location or IP address. The same section states these categories are collected for account creation, personalization, internal marketing, fraud prevention, and interest-based advertising.
EchoStar Corporation's Form 10-K for fiscal year 2025, filed with the SEC on March 2, 2026, defines "DISH Network" as DISH Network Corporation, EchoStar's wholly owned subsidiary, and its subsidiaries, and states in its risk factors that EchoStar "are controlled by one principal stockholder" who serves as its Chairman, President, and Chief Executive Officer, Charles W. Ergen — meaning minority public shareholders have limited influence over corporate governance and any decisions affecting DISH's data practices.
DISH's "Categories of personal information sold or shared" section states the company sells or shares identifiers, imprecise geolocation such as IP address, inferences, commercial information, and internet/network-activity information, naming the recipient categories as data analytics providers, advertising partners and/or networks, social media networks, and data brokers. The notice's EchoStar Affiliates section separately states DISH discloses personal information to EchoStar and named EchoStar affiliates: AirTV, Boost Mobile, Hughes, HughesNet, and Sling TV.
DISH Network Corporation and DISH DBS Corporation's joint Form 8-K, dated February 28, 2023, disclosed that a network outage affecting internal servers and IT telephony was determined to be a cyber-security incident, that appropriate law enforcement was notified, that data was extracted from its IT systems, and that it was possible the extracted data included personal information.
DISH Network's Form 10-Q for the quarter ended March 31, 2023 states the investigation into the February 2023 incident found that customer databases were not accessed, but that employee-related records as well as a limited number of other records containing personal information were among the data extracted, and that DISH incurred approximately $30 million in cyber-security-related expenses that quarter to remediate the incident and provide additional customer support.
The privacy notice states DISH and companies it works with may use cookies, web beacons, tags, and similar technologies, and separately discloses use of session-replay software on its own Services that collects keystrokes, mouse movements, and form-field entries, including for compliance-verification purposes. It also directs users seeking to opt out of interest-based advertising to the Digital Advertising Alliance and Network Advertising Initiative opt-out portals and names The Trade Desk, LiveRamp, and Nielsen as ad-identity/measurement partners with their own opt-out pages.