Lauren is a member of the Global Regulatory Enforcement group. She represents corporations and individuals in government investigations, criminal and regulatory proceedings, and civil litigation. Lauren’s work also involves data privacy, cybersecurity, and information governance. She has worked on a wide range of matters, advising clients on compliance with state, federal, and international privacy and security regimes, including the California Consumer Protection Act (CCPA), the California Privacy Rights Act (CPRA), the New York SHIELD Act, the Children’s Online Privacy Protection Rule (COPPA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), and the EU General Data Protection Regulation (GDPR). Lauren has experience drafting and reviewing privacy policies, data processing agreements (DPA), website terms of use, information security policies, data sharing agreements, and data maps. She has counseled clients on strategies for the collection, use, retention, and protection of data, and advised on breach response and notification obligations.