Cases › leaked private data › LR-2026-0559
Disney faces class action over facial recognition at California parks
Preliminary Why: 1 report: Biometric Update · subject to change · 1 independent report
Status: action reported, no fix
No source states: loss or records, developer and model, agent tool, could do, deployer.
Severity moderate: Test: data of others touched with bounded scope stated. Fact: visitor biometric data is alleged collected at two named parks, Disneyland and Disney California Adventure Park.
Disney has been sued over facial recognition at the entrances of Disneyland and Disney California Adventure, where a photograph taken at entry is compared with the image linked to a ticket or annual pass. Disney implemented the system in April, and optional lanes are offered for guests who do not want it. A proposed class action alleges that Disney did not adequately disclose the biometric collection, so guests, including children, may not have known their facial data was collected. The suit was filed after a visitor's May 10 visit and seeks at least $5 million plus written consent before facial recognition is used on visitors. Disney disputes the claims and says they are without merit. These are allegations only, and no court finding is reported.
What happened
What was done
Risks
Read from the sources; not yet reviewed by a person.
Controls
Not yet read for controls. Controls that mitigate the primary risk:
ApplicationData minimisation · Sensitive-data checks on outbound data · Human approval for high-impact actions · Output filtering and redaction · People told they are dealing with AI · Risk assessment per deployment
Infrastructure / targetEvidence
No source states: what the AI was doing, what it reached or did, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off.
Show the full account: 5 items from the primary sources
What happened, in order
- April Disney implemented facial recognition at the entrances of Disneyland and California Adventure.
- April 28, 2026 Complaint dates the start of facial recognition collection at the parks' entrances.
- May 10 Plaintiff visits the Anaheim parks with her minor children.
- May 15 Class action filed in federal court.
Not dated in the sources:
- Disney disputes the claims in a statement.
Show every field, with its source and grade
The AI system
What happened
Impact
Context
Notes on gaps
The system is a facial recognition entrance check, not an autonomous agent. Disney has reported no remediation. No count of affected persons is given. All harms are allegations disputed by Disney. The 30-day deletion claim is contested by the complaint and is not recorded as fact.
LR-2026-0559 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON