Lei Shen

She advises on a wide range of federal, state, and international privacy laws, including the California Consumer Privacy Act (CCPA) and other state consumer privacy laws, the Illinois Biometric Information Privacy Act (BIPA) and other state biometric data laws, the Washington My Health My Data Act and other consumer health data privacy laws, the Colorado AI Act and other AI laws, and the EU General Data Protection Regulation (GDPR). Her work frequently touches on emerging and transformative technologies, including artificial intelligence, biometrics and facial recognition technologies, neurotechnology, and connected products such as autonomous vehicles and IoT devices.

Lei also counsels clients on the legal and strategic risks associated with data brokers, data scraping, and the monetization and secondary use of data. She helps companies evaluate how data is collected, shared, and commercialized—developing forward-looking compliance strategies that align with business goals while minimizing regulatory and reputational exposure.

She leads privacy diligence in high-stakes transactions, including M&A deals, IPOs, and venture financings—helping clients identify risk, surface opportunities, and move quickly in dynamic deal environments. She also supports clients in responding to regulatory investigations and enforcement actions related to data privacy and security practices.

She has been accredited as a Certified Information Privacy Professional (CIPP/US) by the International Association of Privacy Professionals (IAPP) since 2011.