United States of America: Federal Trade Commission investigation into Illuminate Education over failure to secure students' personal data

Progress

Current status
in consultation
05 Jan 2026 processing consultation
04 Dec 2025 in consultation
01 Dec 2025 under deliberation

Scope

Implementers
United States of America
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
consumer protection authority
Implementation Level
national

Timeline of events

05 Jan 2026
processing consultation

Federal Trade Commission closes consultation on proposed consent order for Illuminate Education over failure to secure students' personal data

On 5 January 2025, the Federal Trade Commission (FTC) closes a consultation on its proposed consent order against educational technology provider Illuminate Education. The FTC alleged that Illuminate Education failed to take appropriate cybersecurit…

Source
Event type investigation
Action type consultation closed
Government branch executive
Government body consumer protection authority
04 Dec 2025
in consultation

Federal Trade Commission opened consultation on proposed consent order for Illuminate Education over failure to secure students' personal data

On 4 December 2025, the Federal Trade Commission (FTC) opened a consultation on its proposed consent order against educational technology provider Illuminate Education until 5 January 2026. The FTC alleged that Illuminate Education failed to take ap…

Source
Event type investigation
Action type consultation opened
Government branch executive
Government body consumer protection authority
01 Dec 2025
under deliberation

Federal Trade Commission published complaint against Illuminate Education over failure to secure students' personal data

On 1 December 2025, the Federal Trade Commission (FTC) published a complaint against educational technology provider Illuminate Education. The FTC alleged that Illuminate Education failed to take appropriate cybersecurity measures, leading to a cybe…

Source
Event type investigation
Action type announcement
Government branch executive
Government body consumer protection authority