Post by Electronic Privacy Information Center

Last week, the FTC finalized its settlement agreement with Illuminate Education, an educational technology provider that the Agency sued after a major data breach exposed the data of 10 million students. EPIC filed comments earlier this year urging the FTC to strengthen the agreement’s data minimization measures, warning that the privacy provisions must create real, enforceable limits on the processing of personal data. The final order incorporated many of our recommendations.