More and more companies are using biometric data internally and with consumer interactions. Biometric identifiers and the new technologies that use them offer exciting benefits. However, as new technology often does, biometrics presents both cybersecurity and data privacy concerns. Certain states have enacted legislation and plaintiffs have filed class-action lawsuits. This article explains the regulatory and litigation landscape, focusing on recent complaints and a federal appellate dismissal. See also our three-part series on unlocking encryption: “Navigating Encryption Options and Persuading Reluctant Organizations” (Aug. 9, 2017); “A CISO’s Perspective on Encryption As Only One Strategy” (Aug. 23, 2017); and “An Attorney Weighs in on Balancing Security and Practicality” (Sep. 13, 2017).