Lauren Kessler


San Francisco

Read full biography at

Lauren is a litigation associate in Orrick’s San Francisco office. Her practice spans cybersecurity and privacy matters, trade secret defense and enforcement, complex commercial disputes, government and internal investigations, and regulatory enforcement actions.

Lauren’s cybersecurity and privacy experience includes defending companies against class action litigation and contractual disputes following the announcement of cybersecurity and privacy incidents, as well as counselling clients on incident response and remediation.

In her commercial practice, Lauren represents companies as both plaintiffs and defendants in a wide range of civil disputes including claims of trade secret misappropriation, breach of contract, and breach of fiduciary duty. Lauren also has experience defending individuals and companies against investigations and subsequent enforcement actions brought by the SEC and OCC. 

Lauren is passionate about her pro bono practice and community service. Lauren will soon argue before a California Court of Appeal to have her client’s life sentence vacated due to fundamental changes in California’s felony murder law. Lauren is also representing a Guatemalan father and daughter seeking Federal Tort Claims Act relief after they were forcibly separated at the U.S. border while seeking asylum. In addition, the Justice & Diversity Center of the Bar Association of San Francisco recognized Lauren as an Outstanding Volunteer in Public Service in 2018 for her work helping homeless clients clear outstanding warrants barring them from access to federal benefits.


Posts by: Lauren Kessler

Seventh Circuit Bolsters Article III Standing for Actions Under the Illinois Biometric Information Privacy Act

On May 5, 2020, the Seventh Circuit held in Bryant v. Compass Group USA, Inc. that a plaintiff who asserted a violation of the Illinois Biometric Information Privacy Act’s (“BIPA’s”) notice and consent requirements had Article III standing to pursue her claim in federal court. With respect to BIPA’s retention schedule posting requirement, however, the Seventh Circuit found that allegations of a statutory violation did not, on their own, suffice to confer Article III standing. This decision will make it easier for defendants to keep BIPA claims in federal court, and its standing analysis has significant implications for BIPA cases, as well as other privacy and data security cases more broadly.