The Walt Disney Company is a Delaware-incorporated, NYSE-listed (ticker DIS) mass media and entertainment company headquartered in Burbank, California, whose FY2025 Form 10-K Exhibit 21 lists subsidiaries including Disney Media & Entertainment Distribution LLC, Disney Worldwide Services, Inc., Disney Entertainment Operations LLC, Hulu, LLC, and ESPN, Inc. Its privacy policy covers "The Walt Disney Family of Companies" and states that Disney collects registration, transaction, and location information — including precise location from devices interacting with its sites, apps, or physical properties, including through beacon technologies — and collects information through cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons. The policy states Disney will not share personal information with third parties outside The Walt Disney Family of Companies except in limited circumstances, including sharing identifiers or hashed email addresses for relevant advertising, and its US state privacy notice states that, as defined by state privacy laws, it "sold" or "shared" or processed for "targeted advertising" categories of personal information including identifiers, Internet activity information, approximate geolocation, and inferences. In 2025, following a Department of Justice complaint referred by the FTC, a federal court approved an order requiring Disney to pay a $10 million civil penalty to settle allegations that it mislabeled child-directed YouTube videos, enabling the collection of personal data from children under 13 without parental notice or consent in violation of the COPPA Rule.
TRACK RECORD
2 ENFORCEMENT ACTIONS
[2025-12-31]
On December 31, 2025, the FTC announced that a federal judge had approved the settlement order requiring Disney to "Pay a $10 million civil penalty for violating the COPPA Rule", to comply with the COPPA Rule "including by notifying parents before collecting personal information from children under 13 and obtaining verifiable parental consent for collection and use of that data", and to "Establish and implement a program to review whether videos posted to YouTube should be designated as MFK" (Made for Kids) unless YouTube implements age assurance technologies for all users.
On September 2, 2025, the FTC announced that Disney would pay $10 million to settle allegations that it "allowed personal data to be collected from children who viewed kid-directed videos on YouTube without notifying parents or obtaining their consent as required by the Children's Online Privacy Protection Rule (COPPA Rule)"; the complaint, filed by the Department of Justice upon notification and referral from the FTC, alleged that Disney Worldwide Services, Inc. and Disney Entertainment Operations LLC violated the COPPA Rule "by failing to properly label some videos that it uploaded to YouTube as “Made for Kids”", which "allowed Disney, through YouTube, to collect personal data from children under 13 viewing child-directed videos and use that data for targeted advertising to children".
The Walt Disney Company's privacy policy states that it collects registration information (such as name, country of residence, gender, date of birth, email address, username, and password), transaction information (such as postal address, telephone number, and payment information), and "Location information, including precise or approximate location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties (including through beacon technologies), or associated with your IP address or other online or device identifier, where we are permitted by law to process this information".
Disney's Children's Online Privacy Policy (updated April 22, 2026) states that when children interact with Disney online, "certain information may automatically be collected", giving as examples "the type of operating system, the child's IP address or mobile device identifier, the web browser" — and that on child-directed websites and apps Disney takes steps to ensure the use of persistent identifiers is limited to purposes such as maintaining or analyzing the functioning of the service, authenticating users, personalizing content, and serving contextual advertising or capping ad frequency.
The Walt Disney Company's Form 10-K for the fiscal year ended September 27, 2025 (Commission File Number 001-38842, filed with the SEC on November 13, 2025) identifies Delaware as its state of incorporation, 500 South Buena Vista Street, Burbank, California as its principal executive offices, and its common stock ($0.01 par value) listed on the New York Stock Exchange under the ticker DIS.
Exhibit 21 ("Subsidiaries of the Company") of The Walt Disney Company's FY2025 Form 10-K disclosed each subsidiary's name and country of incorporation — including Disney Media & Entertainment Distribution LLC (United States), Disney Worldwide Services, Inc. (United States), Disney Entertainment Operations LLC (United States), Hulu, LLC (United States), ESPN, Inc. (United States), Marvel Entertainment, LLC (United States), Lucasfilm Ltd. LLC (United States), and Pixar (United States).
Wikidata's registry entry for The Walt Disney Company (Q7414) records it as a public company listed on the New York Stock Exchange under the ticker DIS, with no parent-organization (P749) statement — The Walt Disney Company is the top of its own ownership chain.
Disney's "Your US State Privacy Rights" notice states: "As defined by such laws, we “sold” or “shared” or processed for “targeted advertising” certain data elements within the following categories of personal information: identifiers, demographic information, commercial information, Internet or other electronic network activity information, approximate geolocation, and inferences drawn from the above" — to recipients including "those who provide advertising, marketing, analytics, data augmentation, or audience measurement"; it also states Disney does not "sell", "share", or process for "targeted advertising" the personal information of known minors under 18.
The Walt Disney Company's privacy policy states that it will not share personal information with a third party outside The Walt Disney Family of Companies except in limited circumstances, including when it works with service providers ("these companies are prohibited from using your personal information for purposes other than those requested by us or required by law") and for advertising: "When we provide you with relevant advertising on third-party sites and applications, we may share limited personal information about you, such as certain identifiers or hashed email address, with third parties. We may also share such information to provide you with and to measure relevant third-party advertising on our sites and applications."
On September 2, 2025, the FTC announced that Disney would pay $10 million to settle allegations that it "allowed personal data to be collected from children who viewed kid-directed videos on YouTube without notifying parents or obtaining their consent as required by the Children's Online Privacy Protection Rule (COPPA Rule)"; the complaint, filed by the Department of Justice upon notification and referral from the FTC, alleged that Disney Worldwide Services, Inc. and Disney Entertainment Operations LLC violated the COPPA Rule "by failing to properly label some videos that it uploaded to YouTube as “Made for Kids”", which "allowed Disney, through YouTube, to collect personal data from children under 13 viewing child-directed videos and use that data for targeted advertising to children".
On December 31, 2025, the FTC announced that a federal judge had approved the settlement order requiring Disney to "Pay a $10 million civil penalty for violating the COPPA Rule", to comply with the COPPA Rule "including by notifying parents before collecting personal information from children under 13 and obtaining verifiable parental consent for collection and use of that data", and to "Establish and implement a program to review whether videos posted to YouTube should be designated as MFK" (Made for Kids) unless YouTube implements age assurance technologies for all users.
Disney's "Online Tracking Technologies and Advertising" notice states: "We, certain service providers operating on our behalf, and third parties may collect information about your activity, or activity on devices associated with you, on our sites and applications and third-party sites and applications using tracking technologies such as cookies, pixels, tags, software development kits, application program interfaces, and Web beacons. We may collect information whether or not you are logged in or registered, and may associate this tracking data with your registration account (if you have one)."
The Walt Disney Company's privacy policy states: "We collect information through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons, including when you visit our sites and applications or use our applications on third-party sites or platforms using one or more devices".