Bio

Andrew Eichen advises clients on the regulatory, privacy, and operational risks surrounding AI deployment. He counsels companies on emerging AI frameworks, such as the EU AI Act, automated decision-making regulations, and state AI disclosure requirements, as well as privacy laws including the CCPA and GDPR.

Drawing on a deep understanding of AI systems, Andrew helps clients translate legal requirements into practical operational controls. He works closely with product and engineering teams to review technical architectures, assess data flows, and advise on design choices that carry legal risk. His recent work focuses on agentic AI systems and integrations using MCP servers.

In his governance practice, Andrew builds tailored AI risk management frameworks mapped to NIST’s AI RMF and industry best practices. This includes drafting internal AI policies, vendor screening processes, risk taxonomies, model documentation, incident response plans, and AI-specific provisions in vendor contracts. Andrew also leads technical evaluations of AI systems, including red teaming, bias audits, and security assessments.

Andrew regularly writes and speaks on AI governance and regulatory issues, including on how established legal doctrines like attorney-client privilege and fiduciary duty apply in AI contexts. His work has been featured by IAPP and Corporate Compliance Insights.

Andrew received his J.D., magna cum laude, from the University of Pennsylvania Law School, where he was inducted into the Order of the Coif and won graduating prizes in business law, law and economics, and trial advocacy. During law school, he focused his studies on technology law, serving as a research assistant to Professor Christopher S. Yoo, and as a Senior Editor of the Journal of Law and Innovation.

Andrew also holds a Master of Public Policy from Georgetown University, where he was named a McCourt Scholar, the school’s most prestigious merit scholarship. His AI-focused coursework included studies with Professor Paul Ohm, and his research on AI in higher education earned the award for Most Outstanding Thesis. Andrew earned his Bachelor of Science in Business Administration, magna cum laude, from Washington University’s Olin Business School, with double majors in Finance and Entrepreneurship.

RECENT PUBLICATIONS

Emerging trends in regulating generative AI: How red teaming is shaping the landscape
In this article for IAPP, Andrew Eichen surveys how regulators around the globe are incorporating, and in some cases requiring, red-teaming of generative AI systems. View publication.

Does Attorney-Client Privilege Survive When AI Listens?
In this Corporate Compliance Insights, Andrew Eichen explores how attorney-client privilege might be implicated when lawyers and clients use AI tools that train on their data. View publication.

‘Tip of the Iceberg’: Lawyers Look to Address Risks From Gen AI Transcription Tools
In a recent Law.com article, Andrew Eichen explains the risks of legal teams using generative AI transcription tools as well as ways to avoid unknowingly sharing sensitive data. View publication.