Disneyland Resort has deployed facial recognition technology at the entrances to both Disneyland and Disney California Adventure, matching guests’ faces against images captured when their tickets or annual passes were first activated. Guests who prefer not to use the system can enter through designated alternative lanes where cast members validate tickets manually.
The system captures a facial image at the turnstile and converts it into a numerical template for comparison against the image already on file. Disney states that these biometric templates are deleted within 30 days unless retention is required for legal compliance or fraud-prevention purposes. The technology is designed to prevent ticket sharing and unauthorized park entry, a longstanding revenue-protection concern for theme park operators.
Disney began testing the facial recognition system at Disneyland in December of last year, but signage directing guests to opt-out lanes only appeared at the Mickey and Friends Parking Structure on 21 April – roughly four months after biometric scanning began at the gates. The delay drew criticism from privacy advocates who noted that many guests were likely scanned without understanding how the technology worked or that non-biometric alternatives existed.
Guests who opt out can enter through the parks’ main Esplanade entrances, where cast members check tickets through conventional validation. Disney’s website notes that cameras may still capture images in these lanes for general security purposes, but biometric comparison processing will not occur on those images.
The company has a long history with biometric entry systems. Disney World in Florida introduced fingerprint scanning at park gates over two decades ago to combat ticket fraud, and subsequently tested facial recognition at Magic Kingdom entrance lanes. The Disneyland deployment marks the first full operational rollout of face-based biometric entry at the Anaheim, California parks.
California does not have a biometric-specific privacy statute comparable to Illinois’s Biometric Information Privacy Act, though the California Consumer Privacy Act and the California Privacy Rights Act cover the collection and processing of biometric identifiers by commercial entities operating in the state. BIPA provides stronger enforcement mechanisms, including a private right of action, despite its narrower scope focused specifically on biometric data, while the CCPA and CPRA offer broader data privacy coverage without equivalent biometric-specific enforcement provisions.
–
By Ali Nassar-Smith
