01. Disconnected opt-out architecture
Opt-out methods did not fully stop sale or sharing across every relevant service and advertising path.
Disney: $2.75M California privacy settlement
California's $2.75 million Disney CCPA settlement centered on opt-out propagation across services, devices, logged-in states, and connected TV app surfaces.
- CCPA
- California
Last updated
Enforcement snapshot
- Amount
- $2.75M
- Regulator
- California Attorney General
- Sector
- Media and entertainment
- Published
- May 2026
Technical failure modes
What failed
02. Cross-brand propagation gaps
Consumers had to repeat choices across services instead of having a single permission state travel with them.
03. Connected TV app gaps
Non-web surfaces must expose usable opt-out paths, not route every consumer back to a web-only workflow.
04. Logged-out identity gaps
A company that can associate devices for advertising has to reason carefully about opt-out scope across those same identifiers.
Remediation path
What Ketch would help validate
Related paths
Related product and solution paths
More enforcement analysis
Other settlements with the same failure modes
Next step
Do not wait for a demand letter to find the gap
The Disney settlement is the clearest enforcement example for Identity Sync and opt-out architecture: privacy choices have to travel across brands, services, devices, and advertising systems.
Get Started Free
Get started in less than 5 min