An Article addressing key privacy and data security developments in 2016 and likely trends for 2017, including federal and state regulation and enforcement. This Article also discusses private litigation related to data breaches, biometrics, and other privacy-related causes, recent legislation in data breach notification and student privacy law, and developments in industry self-regulation, cybersecurity, the internet of things (IoT), and international data protection.