You're missing another approach: use legal coercion to clean up your data trail.
Disney is in California. You have a right to request your data be deleted. Pay a firm to send them a formal deletion request every 90 days.
Disney is in California. You have a right to request your data be deleted. Pay a firm to send them a formal deletion request every 90 days.
It's also not unreasonable to expect that more jurisdictions may eventually follow suit, and so having to dedicate resources to ensure every request comes from an applicable jurisdiction that they legally are required to handle...
...might just be less preferable than fulfilling some "delete data" requests from less demanding areas.
Besides, the idea that large corporations have free unaccountable reign to abuse systems of all sorts, while individuals should be quaking in their boots or snubbing their nose at the mere possibility of inconveniencing an hourly worker under faceless brands is a little over the top, IMO. It's just a request that can be denied.
If Disney wants to spent time and money and reputation to figure out if they legally need to delete the data they collected about you and only do so when that's the case, then that's their choice. Same as it was their choice to collect data in the first place.
If they instead want to be nice and consumer-orientated, as they like their public image to suggest, or at least save some bucks, then they will hit the delete button. They gotta have such button by now anyway for legal requests from Californians.