FTC order on data use includes security requirements

The Federal Trade Commission reached a settlement with the college-savings company Upromise for violating an earlier order on disclosures about data collection and use, with the company now being required to develop and maintain a data-security program, among other measures.

The FTC on Friday announced a “stipulated order” that the company must “maintain a comprehensive information security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of personal information collected from or about consumers.”

The...