The iReady Lawsuit Asks a Question Schools Have Been Avoiding , Who Actually Owns Your Student’s Data?

A specific type of trust is ingrained in the relationship between a parent and a school. When your child walks through the door in the morning, you presume—reasonably, for the most part—that learning takes place inside. Usually, you wouldn’t think that a software program your child uses for math and reading diagnostics is also creating a behavioral profile of them and selling that profile to outside companies for profit. In December 2025, a federal class action lawsuit was launched against Curriculum Associates, the business that developed i-Ready, based on that allegation. The courts are still handling the case. However, the queries it poses are not awaiting a decision.

i-Ready isn’t a specialty item. It is one of the most extensively used instructional platforms in American public schools, utilized by more than 14 million students in grades K–8 nationwide. Before switching to digital learning in the late 2000s, the company that created it, Curriculum Associates, was a relatively quiet textbook publisher for decades. Currently supported by private equity, it employs around 2,700 people and makes about $750 million a year, almost all from taxpayer-funded school contracts. The lawsuit contends that Curriculum Associates does not actually sell reading courses or diagnostic tests, hence the financial context is important. The plaintiffs characterize it as something more akin to surveillance than education because it is the data produced by kids completing those classes and exams and given back into the system.

Important Information

Four California teenagers, backed by their parents, filed the complaint, M.C. v. Curriculum Associates, on December 22, 2025. The legal assertions are particular. The plaintiffs claim that without getting explicit parental approval, the firm gathers student names, student IDs, grade levels, IP addresses, and answers to academic questions before sharing that data with outside service providers. They also claim that children’s behavioral and psychological profiles are constructed using this data. The Federal Wiretap Act, the California Invasion of Privacy Act, the California Computer Data Access and Fraud Act, the Massachusetts Right to Privacy Act, and the Massachusetts Consumer Protection Act are some of the overlapping legal frameworks that are invoked in the complaint. The plaintiffs are requesting class certification, which could potentially extend the action to millions of families, and they are demanding damages exceeding $5 million.

The characterisation has not been silently accepted by Curriculum Associates. In a request to dismiss filed on February 27, 2026, the corporation described the case as a “ideologically motivated crusade” that sought to change school technology policy through litigation rather than legislation. The business claims that its data practices are completely compliant with the Family Educational Rights and Privacy Act (FERPA) and other state-level frameworks, pointing out that these regulations allow schools to get consent on behalf of parents for data gathering related to valid educational objectives. Additionally, the company challenges the wiretapping idea, claiming that it is illegal for a business to intercept its own interactions with users of its own platform. The court must now decide whether that legal interpretation will be upheld.

The plaintiffs maintained the case by filing their challenge to the request to dismiss on April 3, 2026. The decision to allow the case to proceed would have significant ramifications for the larger education technology business. The outcome of that motion is the next significant point in the dispute. Similar allegations regarding data monetization are made in a parallel lawsuit against Instructure, the company that created the popular learning management system Canvas. This suggests that M.C. v. Curriculum Associates is less of an isolated incident and more of a sign of a broader reckoning with how EdTech companies have operated inside public schools.

The particular role that i-Ready plays in this narrative feels a little awkward. Students that utilize the platform are required to use it. As part of their curriculum, several schools mandate that students complete 45 minutes of i-Ready reading and 45 minutes of i-Ready arithmetic each week. When the school has a contract with the corporation and the sessions take place during the regular school day, parents who oppose have few real options. The plaintiffs’ case revolves around this framing, which links mandatory use to public education and incorporates data gathering as a requirement. They are not discussing a product that families have chosen to use. They are portraying a system in which families were enrolled without any kind of significant inquiry.

The length of time these questions have been a part of the EdTech expansion is difficult to ignore. By marketing districts on the promise of data-driven instruction—personalized learning paths, accurate diagnosis, and adaptive content—companies like Curriculum Associates have experienced tremendous growth. Data is needed for all that. Who ultimately owns that data and what happens to it outside of the classroom are the questions the case puts into the public eye. As it happens, there is no definitive answer to that question.