Lauren helps organizations develop frameworks to use data and emerging technologies responsibly and confidently, balancing legal obligations with business objectives. As privacy, cybersecurity, and artificial intelligence (AI) become increasingly interconnected, she designs tailored compliance strategies to protect, manage, and leverage data effectively. She practices from Raleigh, North Carolina as a member of our virtual office, The Link.
Lauren counsels clients on a broad range of privacy and technology matters, including electronic monitoring and surveillance, biometric privacy, AI, and automated decisionmaking, and the adoption of global data privacy and security programs. She also advises on privacy compliance initiatives, including the preparation and implementation of privacy notices and policies, data subject rights processes, data governance strategies for the collection, use, sharing, and commercialization of personal information, and negotiation of data protection agreements.
Her experience spans U.S. and international privacy, cybersecurity, and AI laws and regulations, including sector-specific requirements such as the Health Insurance Portability and Accountability Act (HIPAA), the New York Department of Financial Services (NYDFS) Cybersecurity Regulation, and the Washington My Health My Data Act (MHMDA); AI and automated decisionmaking laws including California’s Automated Decisionmaking Technology (ADMT) and risk assessment regulations, the Colorado AI Act, Connecticut AI Responsibility and Transparency Act, Illinois Human Rights Act (as amended by HB 3733), and NYC Local Law 144; U.S. state comprehensive privacy laws, such as the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (CCPA/CPRA), Colorado Privacy Act (CPA), Texas Data Privacy and Security Act (TDPSA), Virginia Consumer Data Protection Act (VCDPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA); and international privacy laws, including the EU General Data Protection Regulation (GDPR), United Kingdom General Data Protection Regulation (UK GDPR), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Lauren also advises clients on cybersecurity incident preparedness and response, helping organizations develop and test incident response plans, conduct tabletop exercises, and navigate all stages of data security incident response, from initial containment and remediation to breach notification obligations and regulatory investigations.
Clients value Lauren’s ability to translate complex privacy and technology issues into practical guidance. She works with organizations of all sizes, from established enterprises refining mature privacy programs to startups and growing companies building compliance programs from the ground up, helping them develop the knowledge and processes necessary to identify issues, address routine matters independently, and recognize when strategic legal support is warranted. This collaborative approach allows Lauren to develop lasting relationships with clients and serve as a trusted adviser as their needs and regulatory obligations evolve.