I just received this email a few moments ago:
Provide your birthdate and gender to keep streaming
Disney+ now requires additional information from the primary account holder, including your birthdate and what best describes your gender. To avoid any interruption to your streaming, please update your account with this information before December 8, 2022.
And they say:
As per my understanding of the CRPA, the section on Data Minimization (as reported by this website) says:
Businesses must only collect and retain what’s “reasonably necessary” and “proportionate” to the intended purpose.
I already have an account in good-standing with Disney+ for about a year now - I'm sure they already know I'm a legal adult for the reasonable purpose of controlling age-restricted content within their streaming service - and to require a statement of gender disclosure is just odd - so I cannot fathom how they can hold my access to their service for ransom at the price of my personal information.