Shoeb Mohammed

The rules still apply in orbit.

Privacy, IP, brand and marketing for a company developing next-generation space stations.

• PrivacyData about people still needs rules in orbit.
• IPWho owns the design, the code and the improvements.
• BrandNames cleared and protected before they fly.
• MarketingClaims checked before they go out.

Every transfer needs a basis.

Data moves between the U.S. and more than twenty countries across Asia, Europe, the Middle East, Africa and the Pacific. Transfer mechanisms, vendor terms and localization rules decide whether it can.

A car that listens.

Built the U.S. privacy compliance framework for a connected vehicle. Led marketing and advertising counsel, and governance of the cabin's AI voice agent: what it may hear, what it may say, and what it may keep.

• Cabin micVoice is personal data. Wake word, processing and storage each have their own rule.
• Voice agentAI governance: what the agent may hear, say and remember.
• CamerasEvery camera has a stated purpose, inside and out.
• Consent gateConsent comes before collection.
• TelematicsVehicle data leaves the car on one defined path.
• Retention gateKept as long as the purpose lasts, and no longer.
• CloudVendors are bound by contract before the data arrives.
• AppNotices and controls live where the driver already is.
• Third partiesNo sharing without a basis on paper.

Ready for public markets.

In-house lead on the share work behind a Nasdaq listing, through to the certificates Singapore law still requires, alongside outside counsel. I also owned U.S. privacy and international data transfers, and built the privacy controls and lemon-law warranty programs from the ground up.

• Battery dataBattery and driving data, mapped before anyone collects it.
• Privacy controlsControls that are tested, documented and given an owner.
• TelematicsOne path out of the car, and a reason for every field on it.
• WarrantyRepair records, deadlines and resolutions, set up from nothing.
• ListingShare register and certificates.

What happens after it passes.

After the CCPA and CPRA passed, I drafted cleanup and follow-on privacy bills and negotiated with the Attorney General's office over the regulations that decide how the statute actually works.

• Cleanup billClosing gaps in the statute after it passed.
• Follow-on billNew language for what the law had not reached yet.
• NegotiationAcross the table from the Attorney General's office.
• RulemakingRegulations decide how a statute works on a Tuesday morning.