Speaker 02.27.25
02.27
Privacy Enforcers
10:30AM - 11:30AM PST
UCLA Meyer & Renee Luskin Conference Center
425 Westwood Plz
Los Angeles, CA 90095
Drawing upon her invaluable government and in-house experience, Jeewon Kim Serrato advises clients on high-stakes regulatory defense matters, complex security incident investigations, new and emerging data monetization strategies and cross-border M&A and tech transactions. She leads the firm’s Consumer Protection team, co-leads the Retail Industry team and is a leader in the Global AI Task Force.
Jeewon’s practice focuses on guiding organizations through periods of transformation and change, whether it is driven by innovation or crisis management. She counsels clients in the areas of consumer privacy, cybersecurity, data optimization and data science. Jeewon also advises clients on compliance with the Federal Trade Commission (FTC) Act and various state consumer protection, unfair competition and deceptive practices acts.
View More
Drawing from her experience working on Capitol Hill and serving as head privacy executive for a global data broker and a publicly traded financial services company with $3.5 trillion in assets, Jeewon assists clients in pivoting their business models, accelerating growth as a new business and developing strategic acquisition, investment or risk mitigation plans.
Jeewon understands how digital strategy and data assets can shape the direction of a business’s corporate roadmap, and she advises C-suite level executives on the impact that critical business events involving technology and data can have on the employees, customers and the bottom line. Jeewon leads initiatives to design and execute compliance programs for international corporations, as well as negotiate cross-border M&A deals, and advises on high-stakes investigation and dispute matters. She has a thorough understanding of U.S. and global privacy regulations, including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). Utilizing this knowledge, she helps companies create enterprise-wide privacy and data strategy programs from the ground up and assists in testing critical vulnerabilities and performing risk assessments. Having handled and managed hundreds of data breach incidents and internal investigations, she also works with companies to prepare crisis management policies and data breach response plans and handle disputes. Jeewon represented Sephora in the first-ever CCPA settlement with the California Department of Justice and has specific experience handling regulatory defense matters and advising companies on issues relating to adtech, profiling and data monetization.
Jeewon formerly served on the U.S. Department of Homeland Security Data Privacy and Integrity Advisory Committee and helped found the California Lawyers Association’s Privacy Law Section and served as inaugural chair of the Executive Committee. She is co-author of the International Association of Privacy Professionals (IAPP) publication, Data Processing Agreements: Coordination, Drafting and Negotiation (2019) and the “International Personal Data Protection and Cross-Border Data Transfers” chapter of Privacy Compliance and Litigation in California (2021), a publication of the Continuing Education of the Bar (CEB), a nonprofit program of the University of California. Jeewon is also a lecturer at the Maastricht University European Centre on Privacy & Cybersecurity.
Representative Experience
- Acted as chief privacy officer for a major U.S. financial services institution, in charge of the enterprise program for all data protection, privacy and cybersecurity risks.
- Handled and managed over 600 information security incidents, including attacks involving nation-state actors and insider threat issues.
- Assisted in responding to CCPA Notice of Violation letters from the California Office of the Attorney General for several industry clients, including retail and financial services.
View More
- Defended numerous clients in actions involving privacy litigation, such as the California Invasion of Privacy Act and the Video Privacy Protection Act (VPPA).
- Assisted in developing digital transformation and data economy strategies, programs, platforms, products and services.
- Developed incident response programs, and drafted, implemented and tested incident response plans for companies in a variety of industries, including financial services, health care, retail, hospitality, technology, communications and energy.
- Developed and conducted training for various levels of employees, including legal, IT, IS, business lines, marketing departments, and senior management and boards on privacy and cybersecurity risks.
- Provided product counseling and regulatory advice related to 500 e-commerce products and 20 mobile apps globally.
- Advised on biometric law requirements for new AR/VR product development and global launches.
- Conducted privacy and cybersecurity risk assessments and data mapping for facial recognition products and services.
- Advised on payment products and e-commerce integration for social media and other digital platforms.
- Assisted in developing AI ethics strategies and testing.
- Advised retail clients on adtech and data monetization strategies for loyalty program data.
- Provided legal advice for and operationalizing a 150-person consumer dispute and data quality support center, which handled over 20,000 inquiries per year.
- Advised in major M&A transactions, including a global industrial company about notice and consent laws in 60 countries.
- Worked on over 4,000 GDPR-related contracts and cross-border data transfer agreements.
- Provided advice to companies relating to data collection, use and transfer for emerging technologies, such as biometric solutions, Big Data, Internet of Things (IoT) and artificial intelligence (AI).
Professional Highlights
- Recognized as a Recommended Lawyer, Media, Technology and Telecoms: Cyber Law (including Data Privacy and Data Protections) (2022) and in General Commercial Disputes (2019) by The Legal 500 United States
- Recognized by Cybersecurity Docket “Incident Response 30” (2018)
- Recognized by National Law Journal as a Cybersecurity Trailblazer (2017)
View More
- Recognized by International Association of Privacy Professionals, Certified Information Privacy Professional (CIPP/U.S.)
- California Lawyers Association (Privacy Law Section: Chair and Executive Committee)
- Conference on Asian Pacific American Leadership, Board of Advisors
- Prior Positions
- Dell Security Software Solutions: Chief Information Security Officer Advisory Board
- Fannie Mae: Chief Privacy Officer
- LexisNexis: Senior Director of Privacy and Communications
- U.S. Representative Jan Schakowsky: Legislative Counsel
- Speaking Engagements
- “Privacy Enforcers,” California Lawyers Association Privacy Law Section, Annual Privacy Summit, February 2025
- “Ethics and Corporate Responsibility for Executives in Privacy, Cybersecurity and AI,” Practising Law Institute (PLI) “Technotainment” 2024: Distributing Content Across Multiple Platforms Program, October 2024
- “State Privacy Law Panel,” National Association of Attorneys General Consumer Protection Spring Conference, May 2024
Education
-
J.D., University of California, Berkeley School of Law (Berkeley Law), 2004
B.A., University of California, Berkeley, 2001
Institut d’Etudes Politiques de Paris, 2000
Admissions
-
California
District of Columbia
Languages
-
French
Korean