The ever-increasing amount and scope of data that can be collected about or linked to individuals (which we will refer to as “personal data”) has profound implications for consumers and for our society. While the collection, analysis, retention and use of personal data can bring benefits, there are also risks that must be considered and which current U.S. policy does not adequately address. As the data and its applications grow “bigger,” so do our concerns in that regard.