Bhashit (Sheek) Shah

Bhashit “Sheek” Shah is a member of Varnum’s Data Privacy and Cybersecurity Team. Sheek serves as a strategic business partner to clients, advising on all aspects of data privacy best practices and regulatory compliance. He has significant experience providing businesses with pragmatic solutions and strategies to effectively and efficiently address matters related to their data collection, use, and sharing practices, including building out and operationalizing privacy compliance frameworks. Prior to private practice, he served as Lead Counsel to a global social media platform where he advised on the design and operation of an industry-leading privacy compliance program.

Sheek focuses on the development and implementation of compliance programs built to address the cross section of the various global privacy regimes, including GDPR, PIPEDA, LGPD, and U.S. state privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), and the Colorado Privacy Act (CPA).

In addition, Sheek frequently advises on financial privacy laws such as the Gramm-Leach-Bliley Act and the California Financial Information Privacy Act (CalFIPA); children’s privacy laws such as the Children’s Online Privacy Protection Act (COPPA), California’s Age Appropriate Design Code and laws governing the use of social media by children; and biometric privacy laws such as the Illinois Biometric Information Privacy Act (BIPA). He has extensive experience assisting clients in responding to data breaches.

Sheek’s practice includes advising on privacy-related aspects of mergers and acquisitions and in technology transactions, including information technology outsourcing, software as a service (SaaS), and security operations center (SOC) and security information event management (SIEM) outsourcing.

While anticipating his license to practice in Michigan, Sheek supports clients remotely from Chicago. He is licensed to practice in Illinois.