TL;DR: Disneyland’s facial recognition entry system has been live since late 2025. Cameras at park gates scan your face, match it against the photo taken when you first used your ticket, convert everything into biometric “numerical values,” and delete those values within 30 days, allegedly. Children under 18 can be enrolled with parental consent. An opt-out lane exists at each entrance, but new signage explaining this at parking structures only appeared on April 21, 2026, months after the system launched. Disney says it’s “optional and secure.” The system launched on the same day as COPPA’s updated biometric protections for children were being finalized.
How the System Works
Walk up to the Disneyland park entrance. A camera takes a picture of your face. The system compares it to the image Disney saved when you first used your ticket or annual pass [1].
Behind the scenes, biometric technology converts both images into “unique numerical values” (a faceprint). If they match, you’re in. If they don’t, a cast member steps in [2].
Disney’s privacy policy says all numerical values are deleted “within 30 days of creation,” with two exceptions: when “required by law” or for “fraud prevention purposes” [2]. That second exception is vague enough to drive a parade float through. Disney doesn’t specify how long it retains the original facial images, just the derived numerical values.
One visitor described the experience to Inside the Magic: “It scanned my face before I even realized what happened” [3].
The Opt-Out Lane Nobody Told You About
Technically, you can avoid the face scan. Disney says “entrance lanes that do not employ facial recognition technology are also available” [2]. At these lanes, a cast member manually validates your ticket instead.
The problem: Disney didn’t make this easy to find.
The facial recognition system has been running since Disneyland began testing it in December 2025 [4]. But new signs explaining which lanes use facial recognition (and which don’t) only appeared at the Mickey & Friends Parking Structure on April 21, 2026 [5]. That’s roughly four months of face scanning before Disney put up directions at the parking garage.
The blue signs inform guests that “Disneyland Resort park entries use facial recognition technology” and that “use of these lanes is optional.” Guests who don’t want their face scanned should look for overhead signage showing a person silhouette with a diagonal strikethrough [5]. If you miss the sign in the parking structure, you might not realize there’s an alternative until you’re already at the gates.
This is a familiar pattern. Make the surveillance path the default. Make the opt-out technically available but practically invisible. Then point to the opt-out’s existence when anyone asks questions.
Your Kids’ Faces, With Your Permission
Disney’s privacy policy states that children under 18 “may participate with parental consent” [2]. It’s a single sentence buried in the policy. No detail on how consent is obtained, verified, or documented.
This matters more today than it did yesterday. As of April 22, 2026, the FTC’s updated COPPA rules officially expand the definition of “personal information” to include biometric data like face scans. Apps and online services must now get separate parental consent before collecting children’s biometric identifiers [6].
Does a theme park entrance count? COPPA applies to “operators of websites or online services directed to children under 13.” Disney’s park entry isn’t an online service, but the biometric data it creates feeds into digital systems. The line between “theme park turnstile” and “online service” gets blurrier every year.
Even if COPPA doesn’t directly apply here, the timing is telling. The same week the federal government declared children’s biometric data needs special protection, the happiest place on earth is scanning kids’ faces at the front gate.
What Disney’s Policy Doesn’t Say
Disney’s facial recognition privacy page [2] covers the basics: what data is collected, how it’s processed, when it’s deleted. But it leaves major gaps:
- Third-party sharing: The policy says nothing about whether biometric data is shared with vendors, law enforcement, or other companies. Silence isn’t a “no”
- Original images: The 30-day deletion applies to “numerical values” (the biometric faceprint). How long Disney keeps the raw facial images is unaddressed
- Vendor identity: Disney doesn’t name the facial recognition vendor supplying the technology. Is it NEC? Corsight? Amazon Rekognition? Who else has access to the system?
- Accuracy rates: No data on false match rates, particularly across different demographics. Facial recognition consistently performs worse on darker skin tones, women, and children [7]
- Breach notification: If the biometric database is compromised, what’s the notification timeline? You can change a stolen password. You can’t change your face
Theme Parks Are the New Testing Ground
Disney isn’t alone. Universal Orlando already uses facial recognition at Islands of Adventure and Universal Studios Florida [3]. The Opt Out Project documented how Disney collects data through license plate readers in parking areas, cameras throughout the parks, app usage, and credit card transactions [8].
The theme park pitch is always convenience. No more fumbling for tickets. Faster entry. “Seamless guest experiences.” But convenience is the trojan horse for normalization. When 100 million annual visitors pass through Disney’s facial recognition gates, face scanning stops feeling like surveillance and starts feeling like how doors work.
That’s the point. MSG uses facial recognition to ban lawyers and stalk trans women. Meta wants facial recognition in your sunglasses. UK courts just greenlighted police facial recognition nationwide. Each deployment makes the next one feel less alarming. A theme park today, a grocery store tomorrow, your apartment building next year.
What You Can Do
- Use the opt-out lane: Look for the entrance lane with the person-silhouette-and-strikethrough icon. A cast member will check your ticket manually. It might take an extra minute. That’s the price of not handing over your face
- Ask questions at Guest Services: Demand to know which vendor provides the facial recognition, whether data is shared with third parties, and what happens to the raw facial images
- File a complaint: If you believe Disney scanned your child’s face without adequate consent, the FTC handles COPPA complaints. Even if the rules don’t directly apply, complaints create a paper trail regulators notice
- Check your state’s biometric laws: Illinois’s BIPA requires written consent before biometric data collection. Texas and Washington have similar laws. California’s CCPA gives you the right to know what biometric data is collected and request deletion.
- Support the Surveillance Technology Oversight Project: S.T.O.P. has been fighting commercial facial recognition deployments since before Disney joined the party
References
- MickeyVisit – Disneyland Testing Positive Change to Park Entry to Reduce Lines (March 2026)
- The Walt Disney Company – Privacy at Disney Resorts: Facial Recognition
- Inside the Magic – New Disney Park Policy Raises Alarms Over Guest Privacy and Data Security (2025)
- Disney Dining – New Disneyland Entry Policy Sparks Outrage Over Guest Privacy (2026)
- WDW News Today – Facial Recognition Signs Added to Disneyland’s Mickey & Friends Parking Structure (April 21, 2026)
- Davis Polk – FTC Prioritizes COPPA Enforcement (2026)
- ACLU – More than a Dozen Wrongful Arrests Due to Police Reliance on Facial Recognition Technology (April 2026)
- The Opt Out Project – Data-Free Disneyland
Published: April 22, 2026