The year started with Portland, Oregon’s ban on the use of facial recognition technology by private entities in places of “public” accommodation. It concluded with the rendering of important appellate decisions on the Illinois Biometric Information Privacy Act. In the middle, was the continued flurry of litigation, class action settlements, and legislative activity.