Disney Hit With $10M Fine Over Kids’ Data

Disney has been fined $10 million for violating children’s data privacy rules by unlawfully tracking young users on YouTube, underscoring growing regulatory scrutiny of how major media companies handle minors’ data online.

According to regulators, Disney collected and used personal data from children watching its content on YouTube without obtaining verifiable parental consent, a direct breach of the Children’s Online Privacy Protection Act (COPPA). The data was allegedly used to enable targeted advertising and audience profiling, despite Disney’s content being clearly directed at children.

The enforcement action follows an investigation by the Federal Trade Commission, which found that Disney benefited from YouTube’s advertising ecosystem while failing to ensure adequate safeguards for child viewers. Regulators emphasized that companies cannot outsource responsibility for children’s privacy to platforms alone.

The case highlights a broader shift in enforcement. Authorities are increasingly holding content owners, not just platforms, accountable for how children’s data is collected, shared, and monetized. As regulators tighten oversight, media and entertainment companies are being forced to reassess their digital strategies, especially on third-party platforms.

For the industry, the fine serves as a warning that compliance failures carry real financial and reputational risks. For parents and policymakers, it reinforces a clear message: children’s data is not a commercial asset, and protecting it is a legal obligation, not an option.