In the US, you generally only need to provide the ID/name of one person responsible for booking. A lot of hotels don't really even push verifying the id too hard as long as they have a credit card on file. As an American it is always jarring to me when I travel and I get my passport photocopied/details taken at a hotel. Disney might have a different policy, but hotels generally don't register children or more than one guest in my experience. Until the last few years you didn't even need ID to fly in the US

The portrait photos at the gate for finding lost kids are a great idea. But only if Disney is very clear that the portrait is only retained for the time the ticket is valid, and then deleted.

The problem is that most companies in the US basically retain the right to do whatever they want with your data even if they only plan to use it in a very limited fashion.

If only there were a law that required them to enumerate specifically how your data gets used...