Last year marked the twentieth anniversary of the Health Insurance Portability and Accountability Act (HIPAA), and it was a landmark year, from the commencement of the Phase 2 audit program to the re-cord amount of settlement and enforcement activity. 2017 promises to be just as eventful, from the uncertain impact of the Trump administration to OCR’s efforts to ensure that HIPAA guidance keeps pace in a period of rapid health-care technological innovation. There were major HIPAA developments in 2016, but much remains on the regulatory horizon for 2017.