Photograph of Lee Matheson, CIPP/US/E/A, CIPM, PCIP


  • Denison University, B.A. political science (2013)
  • The Ohio State University, Moritz College of Law, J.D. (2017) cum laude


  • District of Columbia
  • Ohio

Lee Matheson, CIPP/US/E/A, CIPM, PCIP

Washington, D.C.
Phone: +1 202.654.6728
1001 Pennsylvania Avenue NW
Washington, DC 20004-2595

Lee Matheson is an associate in Crowell & Moring’s Washington, D.C. office, where he is a member of the firm’s Privacy & Cybersecurity Group. Lee counsels businesses on both domestic and international privacy compliance matters, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Payment Card Industry Data Security Standard (PCI DSS). Lee also advises clients on a wide range of other privacy and cybersecurity issues, including data breaches and incident response, risk assessments, and policy development.

Lee joined Crowell & Moring from the International Association of Privacy Professionals, where he was a 2017-2018 Westin Research Fellow. At the IAPP, Lee wrote extensively on current developments in both American and European privacy law. Lee is a Certified Information Privacy Manager (CIPM), a Certified Information Privacy Professional with U.S. Private Sector, European, and Asian concentrations (CIPP/US/E/A), and a Payment Card Industry Professional (PCIP). While in law school, Lee was a member of the Ohio State Journal of Criminal Law and an extern with both the Ohio Constitutional Modernization Commission and the Privacy Office of the Department of Homeland Security.


Admitted to practice: District of Columbia, Ohio

Speeches & Presentations

  • "Your Body as Data: Facial Recognition, Biometrics, and the Future of Privacy," Catholic University Columbus School of Law, Washington, DC (November 5, 2019). Panelist: Lee Matheson.
  • "CCPA Compliance 101: Preparing for January 1," ACC Southern California (October 7, 2019).
  • "Staffing the DPO Role—Internal or External? Attorney or No?" IAPP Webconference (March 6, 2018). Moderator: Lee Matheson.
  • "The Year in U.S. Privacy," 2017 Data Protection Congress (2017). Co-Presenter: Lee Matheson.


Client Alerts & Newsletters