Consent Decrees Face Siege as X Corp., DOJ Seek to Unwind

On June 4, 2026, the Federal Trade Commission published a notice in the Federal Register soliciting public comment on a petition from X Corp. The company, formerly known as Twitter, wants the agency to set aside or modify a 2022 consent decree that settled allegations the platform misled users by collecting phone numbers and email addresses for security purposes while using them for targeted advertising. The petition, first reported by MediaPost, marks the second attempt by Elon Musk's social media company to escape the order's strict privacy and data-governance requirements, which include an independent assessor and regular compliance audits.

The X Corp. petition is not an isolated procedural maneuver. It arrives in a year when consent decrees, those hybrid instruments that sit somewhere between private settlement and court-ordered injunction, are under attack from multiple directions simultaneously. Private parties want out of agreements their predecessors signed. The Department of Justice itself is asking federal appellate courts to dissolve decrees that have structured government conduct for decades. And the FTC is deploying its investigative authority against entities whose very existence, in at least one case, could not survive the inquiry.

The substantive question in each dispute is different. What ties them together is a legal architecture that was never designed for the volume of challenges it now faces. Consent decrees are binding because a party consented to be bound. When the party that consented no longer exists, or when the agency that negotiated the decree has been reconstituted under new leadership, or when the factual predicate has shifted beneath the agreement, the question of who gets to walk away and under what standard becomes the entire case.

The 2022 Twitter Order and What X Wants to Undo

The 2022 FTC order resolved a complaint brought under Section 5 of the FTC Act, which prohibits unfair or deceptive acts or practices. The agency alleged that between 2013 and 2019, Twitter asked users for phone numbers and email addresses under the stated purpose of account security, such as two-factor authentication, but then used that same data to enable targeted advertising. The consent decree, entered in the Northern District of California, required Twitter to implement a comprehensive privacy and data security program, submit to biennial assessments by an independent third-party assessor, and refrain from misrepresenting its data practices.

X Corp. argues, in essence, that the company that agreed to those terms no longer exists. Musk acquired Twitter in October 2022 and has since restructured the company, rebranded it, and replaced its leadership, compliance staff, and data-governance infrastructure. The legal theory invokes the Supreme Court's 1992 decision in Rufo v. Inmates of Suffolk County Jail, which held that a consent decree may be modified when a party demonstrates a significant change in factual conditions or law that makes compliance substantially more onerous or the decree itself unworkable. Whether a change in corporate ownership and branding qualifies is precisely the question the FTC must now answer.

Privacy advocates filed comments during the FTC's public comment window arguing that X Corp. fails to meet the Rufo standard. Ars Technica reported on July 2 that groups including the Electronic Privacy Information Center warned the commission that X Corp.'s petition fails to clear the demanding legal standard necessary to grant what they called an extraordinary remedy. The advocates pointed to ongoing concerns about X's data practices, including the integration of user data with xAI's Grok chatbot training pipeline, as evidence that the factual conditions underlying the 2022 order have not materially changed in X's favor.

The FTC has not indicated when it will rule on the petition. Under the agency's rules, the commission may modify a final order after providing an opportunity for public comment and determining that changed conditions of fact or law require the modification. The burden of proof rests on the petitioner. For X Corp., that means persuading a majority of commissioners that a corporate reorganization triggered by a leveraged buyout constitutes the kind of changed circumstance that Rufo contemplates.

The Flores Settlement: When the Government Seeks Its Own Exit

While X Corp. is asking a regulator to let it out of a deal, the Department of Justice is asking a court to let the government out of one. On June 3, the DOJ appeared before the U.S. Court of Appeals for the Ninth Circuit to argue that the Flores v. Garland settlement, a consent decree first entered in 1997, should be terminated. Law.com reported that the government's brief was styled with the declaration, "Enough is enough."

The Flores settlement, memorialized in a consent decree approved by the U.S. District Court for the Central District of California, requires that migrant children held in federal custody be placed in facilities that are "safe and sanitary" and released "without unnecessary delay" to a parent, guardian, or state-licensed program. The agreement emerged from litigation that began in 1985, when Jenny Lisette Flores, a 15-year-old from El Salvador, was detained by immigration authorities in California and held in a facility alongside adults. The Supreme Court had already ruled in 1993, in Reno v. Flores, that the government's detention policy was facially constitutional, but the settlement imposed stricter, court-enforceable requirements that went beyond the constitutional floor.

The DOJ's position before the Ninth Circuit, according to MSN and Law.com, encountered skepticism from the bench. A DOJ lawyer reportedly struggled to articulate why the consent decree, which the government voluntarily entered and has been bound by for nearly three decades, created what the government now characterizes as an impermissible constraint on executive authority. The constitutional argument, that a district court cannot indefinitely supervise the executive branch's detention practices through a consent decree, is one that appellate courts have been reluctant to embrace when the government itself negotiated and signed the agreement.

The settlement, memorialized in a consent decree, requires that children be held in 'safe and sanitary' facilities and released from federal custody 'without unnecessary delay' to a guardian or state-approved program for dependents., The Flores consent decree, as summarized by Law.com

The procedural posture of the Flores case is significant. The government is not asking a district court to modify the decree under Rufo; it is asking the Ninth Circuit to terminate it outright, a far more aggressive remedy. This places the case on a different legal track from the X Corp. petition, which operates within the FTC's administrative modification process. But both disputes ask the same structural question: under what conditions can a party to a consent decree declare that the bargain has become intolerable?

The implications of the Flores litigation extend beyond immigration law. If the Ninth Circuit embraces the government's argument that consent decrees impermissibly constrain executive discretion, the reasoning could be cited in any case where a federal agency is bound by a court-enforceable settlement. That includes antitrust consent decrees, environmental remediation agreements, and policing reform settlements entered under Section 14141 of the Violent Crime Control and Law Enforcement Act.

At the same time, the FTC's enforcement docket has produced a different kind of exit. On June 5, Law.com and Reuters reported that Diversity Lab, a prominent legal-industry consulting firm that administered the Mansfield Rule certification for law firm hiring and promotion practices, was closing its doors. The closure followed an FTC investigation launched on the same day in January 2026 that the agency sent warning letters to 42 major law firms regarding their diversity, equity, and inclusion programs. The investigation concerned whether the Mansfield certification process, which required participating firms to consider at least 30 percent underrepresented attorneys for leadership roles and client pitches, constituted an unlawful agreement among competitors in restraint of trade.

The Diversity Lab case is a study in how the mere existence of an FTC investigation can function as a sanction. No complaint was filed. No consent decree was entered. No administrative order was issued. But the organization, facing what it described to Reuters as "meritless" scrutiny and the prospect of litigation costs it could not sustain, chose dissolution. The FTC, by launching the investigation, achieved an outcome, the elimination of the Mansfield certification infrastructure, without ever having to prove a violation of law.

This is the enforcement landscape that consent decrees now inhabit. On one side, regulated parties argue that changed circumstances, new ownership, or shifting legal standards justify release from bargains their predecessors struck. On the other, the government itself seeks to exit agreements that have constrained its discretion across administrations. And in the background, the agencies are wielding investigative authority in ways that produce compliance outcomes without ever reaching the consent-decree stage.

The CFPB added another layer in June 2026, issuing guidance under the Truth in Lending Act and Regulation Z, implementing Executive Order 14406, which addresses immigration status as a factor in ability-to-repay determinations, as noted by JD Supra. Meanwhile, Kansas joined the DOJ in asking a federal court to end a longstanding policy granting in-state tuition to certain undocumented immigrants, as reported by UPI, an action that echoes the Flores litigation in its use of the courts to unwind settled policy arrangements.

The legal standard that governs all of these disputes traces back to Rufo, but the Rufo framework was built for a different era. It assumed that consent decrees would be challenged one at a time, by parties with symmetrical incentives, before courts that could weigh changed circumstances on a case-by-case basis. What 2026 has produced is something closer to a systemic stress test: multiple decrees, challenged simultaneously, by parties with radically different incentives, before courts and agencies that are themselves being reconstituted.

The Ninth Circuit's ruling in the Flores case, expected later this year, will be the first appellate decision to address the government's theory head-on. The FTC's ruling on X Corp.'s petition, whenever it arrives, will set the administrative standard for corporate successors seeking to escape their predecessors' consent decrees. And the Diversity Lab closure, though it produced no judicial opinion, will stand as a data point for what happens when an enforcement agency decides that an investigation itself is the remedy.

What none of these proceedings will answer, because no single case can, is the question that underlies the entire consent-decree architecture: whether the legal system's primary mechanism for resolving complex regulatory disputes, the voluntary agreement made enforceable by court order, can survive a political and economic environment in which no party's consent can be presumed to survive the next election, the next acquisition, or the next agency reorganization. The docket is open. The stress test is underway.