Disney hit with $10 million penalty for collecting kids’ data on YouTube

Disney faces a $10 million penalty

The Federal Trade Commission has ordered Disney to pay a $10 million civil penalty after determining the company allowed children’s personal data to be collected through YouTube videos.

Regulators say Disney failed to properly mark hundreds of its videos as “Made for Kids,” a requirement under U.S. privacy law.

This mislabeling meant YouTube could collect data and serve personalized ads to underage viewers. For one of the world’s most family-friendly brands, the ruling has sparked embarrassment and significant questions.

The FTC says Disney broke COPPA rules

The Children’s Online Privacy Protection Act, better known as COPPA, is at the center of the case. Passed in 1998, the law requires companies to notify parents and obtain their consent before collecting personal data from children under 13.

The FTC said Disney ignored this rule when it mislabeled kids’ videos on YouTube. By default, the mislabeling exposed young viewers to targeted ads and autoplay features, which COPPA explicitly designed to prevent.

Disney disputes the allegations and says it has cooperated with regulatory requirements.

How the mislabeling actually happened

Disney managed its YouTube content at the channel level rather than labeling each video individually. That meant even child-focused videos uploaded to “Not Made for Kids” channels were automatically treated as safe for data collection.

In mid‑2020, YouTube reportedly redesignated more than 300 Disney videos that had been mislabeled, including videos from franchises such as Frozen, Toy Story, Coco, and The Incredibles.

Despite repeated warnings, Disney continued its channel-level approach, exposing children to inappropriate advertising practices for years.

YouTube had faced similar penalties before

This case didn’t come out of nowhere. In 2019, YouTube paid $170 million for COPPA violations and introduced stricter labeling requirements for creators.

Disney should have been aware of those rules as one of YouTube’s largest content partners. The FTC noted that YouTube notified Disney directly of its failures, yet the missteps continued.

For regulators, the fact that Disney continued using practices contrary to COPPA rules even after warnings made the penalty inevitable.

Disney’s official response stresses commitment

Disney emphasized that it remains committed to protecting children’s privacy in its statement. The company noted the settlement does not involve its own platforms, such as Disney+, but is limited to content distributed on YouTube.

“Supporting the well-being and safety of kids and families is at the heart of what we do,” the company said.

Disney pledged to invest in compliance tools going forward. Still, critics argue the company should never have overlooked its legal responsibilities in the first place.

The FTC stresses trust and accountability

FTC Chair Andrew Ferguson said the case reflects Disney’s “abuse of parents’ trust.” He explained that the settlement imposes financial penalties and requires Disney to create a long-term video-review program to ensure proper labeling.

The FTC also encourages the adoption of age assurance technology that can identify viewers’ ages without relying on self-reporting.

For the agency, this case is about setting a precedent that even trusted, global brands cannot neglect children’s online safety.

Disney must overhaul its video review process

As part of the settlement, Disney must establish an “Audience Designation Program” to review and classify its YouTube content systematically.

Under the settlement, Disney must establish an Audience Designation to review whether each YouTube video it publishes should be designated “Made for Kids.”

The program must be maintained for at least ten years unless YouTube implements effective age assurance technology that satisfies COPPA requirements.

COPPA compliance is a long-standing issue

This is not Disney’s first brush with COPPA enforcement. In 2011, the company paid $3 million for its Playdom social networking service, which also mishandled kids’ data.

Privacy experts say repeat violations show systemic weaknesses in how Disney manages compliance. It raises a troubling question for parents: if even one of the world’s most family-oriented companies repeatedly struggles.

In light of this case and existing child privacy regulations, it raises the question of how many other firms might also be failing to fully comply.

What COPPA requires from companies

COPPA places clear obligations on websites and apps that target children. They must notify parents about what information is collected, obtain verifiable parental consent, and use the data only for the service’s stated purpose.

They are also barred from serving targeted advertising to under-13 viewers. Disney’s failure to flag its content properly meant that YouTube collected browsing data, such as viewing history, which was then used for ad targeting. Regulators said this was a straightforward violation of the federal rule.

Targeted ads made the issue worse

Disney earns revenue from YouTube through a share of Google’s advertising system and its direct ad sales.

The FTC complaint said mislabeling allowed targeted ads to be shown on videos clearly aimed at kids, exposing children to marketing intended for older audiences.

The FTC complaint alleges that autoplay transitioned viewers from mislabeled Disney videos into “Not Made for Kids” content. Critics argue this shows how mislabeling wasn’t just a technical glitch; it directly enabled profit-making behavior.

How YouTube’s system is supposed to work

After the 2019 FTC‑Google settlement, YouTube’s COPPA‑compliance framework required content creators to mark videos either “Made for Kids” or “Not Made for Kids.” For videos designated “Made for Kids,” YouTube disables certain features such as personalized advertising, comments, and autoplay to comply with COPPA requirements.

Creators may designate at either the video or channel level, but must ensure accuracy. YouTube indicated that it had to redesignate many of Disney’s videos, which had been mislabeled.

The complaint alleges that Disney’s reliance on channel‑level defaults rather than video‑by‑video review contributed to the labeling errors.

Why the $10 million delicate matters

For a company like Disney, $10 million is not financially devastating. But regulators argue the penalty carries symbolic weight.

It shows that even the most powerful media companies are not immune to oversight. FTC officials say the fine is intended to send all creators a message that children’s data privacy cannot be an afterthought.

Privacy advocates believe such penalties are critical to shifting the cost-benefit analysis, so breaking the rules is no longer cheaper than compliance.

Privacy experts say Disney ‘missed the mark’

Experts have been blunt in their assessment. Mark Weinstein, author of Restoring Our Sanity Online, said Disney “knowingly broke the rules” despite repeated warnings.

Others argue that the case shows how even well-resourced companies can fail to meet evolving compliance standards.

Privacy professionals emphasize that labeling children’s content is not optional; it’s the backbone of safeguarding young viewers online. For Disney, the lapse highlights a gap between its family-friendly brand image and behind-the-scenes data practices.

YouTube may turn to AI for age checks

YouTube may adopt age assurance methods to help determine when a viewer is under 13. The FTC order allows Disney to rely on such signals if they satisfy COPPA rules.

However, details about how precisely such technology will work, for example, what data is used and how recommendations may be limited, are still being discussed and have not been fully disclosed.

Why Disney’s reputation makes this different

Disney is one of the most trusted family brands, which has made the FTC’s complaints especially damaging. For decades, parents have associated Disney with safe entertainment.

Regulators argue this made the company’s failures even more serious, as families trusted Disney not to expose children to harmful practices.

The disconnect between Disney’s image and compliance lapses has drawn widespread attention. Observers say the company must now work harder than ever to restore confidence and prove its family-first values go beyond marketing.

See how YouTube Shorts is adding a TikTok-style twist to keep viewers hooked.

Lessons for smaller creators and platforms

While Disney is the focus, the case also warns smaller creators on YouTube. Mislabeling content isn’t just a technical error; it can be treated as a violation of federal law.

Independent creators may lack Disney’s resources to fight regulators, making compliance even more critical.

Industry experts recommend reviewing content policies carefully and erring on the side of caution when labeling videos. If Disney can stumble into a $10 million penalty, the risks for smaller players are even higher.

Learn how Disney and Universal are taking legal action against Midjourney over alleged copyright misuse.

What do you think about YouTube filing a case against Disney for stealing its data? Please share your thoughts and drop a comment.

Read More From This Brand:

• YouTube targets Ad blockers with sneaky new tactic that slows videos
• YouTube Shorts Gets Smarter With Google Lens
• YouTube TV Is Getting a Major Upgrade

Don’t forget to follow us for more exclusive content on MSN.

If you liked this story, you’ll LOVE our FREE emails. Join today and be the first to get stories like this one.

This slideshow was made with AI assistance and human editing.