Disney will pay a record fine of nearly $3 million to settle with California's Attorney General over its streaming services' deliberately confusing data privacy controls, the largest penalty to date under the California Consumer Privacy Act (CCPA).
Let it go? Not so fast: The Attorney General's investigation zeroed in on what it called a deliberately confusing opt-out process that made it nearly impossible for users to stop their data from being sold. The state found that privacy toggles were often confined to a single device and webforms were ineffective, while Disney's connected TV apps offered no way to opt-out at all.
A costly habit: The settlement marks a troubling pattern for Disney, coming just months after the company paid a $10 million FTC fine in December for violating COPPA with its data collection on YouTube. The two penalties push Disney's privacy-related fines to nearly $13 million in less than six months.
The settlement puts a spotlight on the growing regulatory war against "dark patterns"—deceptive user interfaces designed to hinder consumer choice. With the California AG also probing other outlets, a detail first reported by Deadline, the move is a clear warning shot to the entire media industry.
