A $5 million class action lawsuit was filed May 15 against Disneyland and Disney California Adventure, alleging the parks collect biometric data from visitors — including children — without adequate disclosure or meaningful consent.
What happened
Disneyland rolled out facial recognition at park entrances in April 2026. The system photographs guests at entry lanes, converts each face into a unique numerical value, and matches that value against the photo saved when a ticket or annual pass was first scanned.
Plaintiff Summer Christine Duffield visited on May 10 with her minor children. She alleges Disney failed to obtain written consent before capturing biometric data, and that the opt-out signage buried in security areas doesn't satisfy California privacy and consumer protection law.
Disney states: "We respect and protect our guests' personal information and dispute the plaintiff's claims, which we believe are without merit."
What Disney's policy actually says
Disney's official facial recognition privacy page (privacy.thewaltdisneycompany.com) describes it this way:
Participation is optional — opt-out lanes are available along the Esplanade
Biometric numerical values are deleted within 30 days (except for fraud or legal holds)
Children under 18 can participate with a parent or guardian's consent
Even in opt-out lanes, your image may still be captured — it just won't be processed biometrically; a Cast Member validates your ticket manually instead
That last point is easy to miss. Opting out of biometric processing doesn't mean opting out of being photographed.
Why it matters
The lawsuit's core argument isn't that the policy is secret — it's that the default is wrong. Guests who don't seek out the opt-out lane are enrolled automatically. The complaint argues the burden should run the other direction: opt in, don't opt out.
This matters beyond Disneyland. Facial recognition is now standard at airports, stadiums, concert halls, hospitals, and retailers. The question of who bears the burden of consent — the venue or the guest — is the legal fight that will define how this technology spreads.
What to do before your next visit
If you're going to Disneyland or DCA and want to avoid biometric processing:
Enter through the main Esplanade entrances
Choose lanes with "Entrance" signage (no biometric tech)
Note: you may still be photographed — a Cast Member will manually check your ticket
At any large venue, look for facial recognition disclosure notices before you enter. If you don't see them, ask.
Up next · Wednesday
A database tracking 98,000 data breaches just got a major upgrade — 30 new fields, vendor tracking, and breach subtypes. Here's how to use it.