FTC Finalizes Settlement with Illuminate Education, Heeding EPIC’s Call to Strengthen Data Minimization Requirements

June 10, 2026 - 02:52

On Friday, the Federal Trade Commission finalized a revised consent order with Illuminate Education, a student data analytics company. The updated settlement incorporates several recommendations from the Electronic Privacy Information Center, or EPIC, aimed at strengthening data minimization requirements.

The original order stemmed from allegations that Illuminate Education collected and retained sensitive student data beyond what was necessary for its services. EPIC had pushed for stricter limits on data collection and retention, arguing that the initial terms were too weak. The FTC's final version now requires Illuminate to limit data collection to what is specifically needed for the educational tools it provides, rather than allowing broad, open-ended data hoarding.

Under the revised order, the company must also delete student data within a reasonable timeframe after it is no longer needed. This addresses concerns that student records could be stored indefinitely, increasing the risk of breaches or misuse. The FTC emphasized that the changes align with the principle of data minimization, a core tenet of privacy law.

The case highlights ongoing scrutiny of ed-tech companies that handle children's information. Critics have long warned that such firms often collect more data than necessary, from test scores to behavioral patterns, without clear consent from parents or schools. The revised order sets a precedent for how regulators may handle similar cases in the future.

Illuminate Education did not immediately comment on the finalized settlement. The FTC's decision marks a win for privacy advocates who argue that stronger safeguards are needed to protect students in an increasingly data-driven education system.