FTC Finalizes Consent Order Against Illuminate Education Over Student Data Breach Affecting 10 Million Children
By
Maki DePalo
Summary
The FTC has finalized a modified consent order against Illuminate Education, a K-12 software vendor, for failing to protect the personal data of over 10 million students. The action, approved on June 5, 2026, follows a proposed order from December 2025 and signals that the FTC expects organizations handling student data and children's information to back their security promises with real controls. The case highlights growing regulatory scrutiny of EdTech data practices and student privacy protections.
Source
Key quotes
· 3 pulledthe FTC expects security promises to be backed by real control
the EdTech Provider did not adequately protect the personal data of more than 10 million students
sends a clear signal to organizations handling student data, children's information, and other sensitive personal records
You might also wanna read

FTC Orders Seven AI Companies to Disclose Information About Chatbot Safety for Children and Teens
The Federal Trade Commission (FTC) has ordered seven major AI companies - OpenAI, Meta, Instagram, Snap, xAI, Alphabet (Google), and Charact
FTC Approves Final Order Against Publishing.com, Settling Allegations It Misled Consumers
FTC Approves Final Consent Order in Pest-Control Noncompete Matter
FTC Approves Final Consent Order in Micromarket Kiosks Deal
23andMe Data Breach Class Action Settlement Reached for 6.4 Million Affected Customers
A class action settlement has been reached with 23andMe (now Chrome) regarding a 2023 data breach that affected approximately 6.4 million U.
EFF and Allies Argue X Corp. Should Not Evade FTC Privacy Oversight Through Name Change
X Corp. (formerly Twitter) filed a petition with the FTC to set aside or modify a 2022 consent decree requiring regular privacy compliance r

Comments
Sign in to join the conversation.
No comments yet. Be the first.