Sheek's practice focuses on advising clients across industries on pragmatic compliance solutions and data protection strategies to effectively and efficiently address matters related to the business’ data collection, use, and sharing practices, including building out and operationalizing privacy compliance frameworks.
Sheek counsels clients on a variety of relevant data protection regulations, including U.S. state laws (such as the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), and the Colorado Privacy Act (CPA)); financial privacy laws such as the Gramm-Leach-Bliley Act and the California Financial Information Privacy Act (CalFIPA); children’s privacy laws such as the Children’s Online Privacy Protection Act (COPPA), California’s Age Appropriate Design Code, and laws governing the use of social media by children; biometric privacy laws such as Illinois’ Biometric Information Privacy Act (BIPA); and international privacy laws such as the General Data Protection Regulation (GDPR).In addition, he has extensive experience assisting clients in responding to data breaches, including meeting regulatory reporting obligations under state data breach laws.
Along with proactive compliance counseling, Sheek advises clients in the corporate space. This includes advising public and private companies and private equity firms in privacy-related guidance stemming from mergers and acquisitions, as well as counseling companies in various technology transactions, such as information technology outsourcing, software as a service (SaaS), and security operations center (SOC) and security information event management (SIEM) outsourcing.
Prior to re-joining Reed Smith, Sheek was in-house privacy compliance counsel at Meta Platforms, Inc. (fka Facebook) where he advised on the build out and execution of the company’s global privacy program across Meta’s many products and offerings. This included counseling on the development of functions to measure privacy-related risks and effectively incorporate privacy-by-design.
