Advises on privacy strategy to align compliance programs with business goals.
Steers clients through complex privacy laws at state, federal, and global levels, including GDPR, HIPAA, CCPA, and comprehensive U.S. state privacy laws.
Crafts tailored privacy policies and compliance frameworks.
Reviews commercial contracts for privacy compliance and alignment of terms with client business objectives.
Leads response to cyber incidents and data breach crises.
FUN FACT!
Bread devotee who prefers tasting to baking.
About Joyce
Joyce Kim is a skilled privacy professional with a focus on resolving complex privacy matters, covering topics such as, uses of consumer data, cookies and tracking technologies, data subject access requests, and data transfers. She has a particular mastery for drafting internal and consumer-facing policies, helping clients shape their business practices to safeguard privacy and stay compliant. Joyce is passionate about tracking evolving privacy legislation to keep clients well-informed of developments that may impact their operations.
Joyce also brings a wealth of experience and versatile set of skills as a result of her litigation and M&A experience. As a corporate finance associate, Joyce advised on M&A transactions by conducting due diligence and preparing critical agreements. Her strong advocacy skills also stem from representing clients in legal disputes concerning real estate, antitrust, employment, products liability, commercial contracts, and intellectual property rights.
Joyce is a member of the International Association of Privacy Professionals and is a certified CIPP/US.
Representative Experience
Advises on complex privacy issues including consumer data use, cookies, tracking technologies, and data subject rights requests.
Drafts tailored internal and consumer-facing privacy policies to align with business operations and legal requirements.
Monitors and interprets evolving privacy laws to keep clients informed and proactively compliant.
Guides cross-border data transfers and data-sharing frameworks.
Prepares data protection impact assessments (DPIAs) and related compliance documentation.
Represents clients in regulatory inquiries and privacy investigations.
Supports M&A transactions through due diligence of contracts, IP documentation, general corporate, and litigation matters to identify potential risks and solutions.
Leverages prior litigation experience in disputes involving real estate, antitrust, employment, product liability, commercial contracts, and IP rights.
Representative Publications
“Gift Card Cash-Out Threshold Jumps to $15 in California,” American Legal Blogger, October 2025
“Amazon pays $2.5 Billion to Settle FTC Claim over Prime Subscriptions,” Lexology, September 2025
Practice Areas
Privacy & Data Security
Advertising & Marketing
PROFESSIONAL ASSOCIATIONS
National Asian American Pacific Bar Association (NAPABA)
Association of National Advertisers (ANA)
International Association of Privacy Professionals, CIPP/US
BAR ADMISSION
Illinois 2021
Education
Washington University School of Law, J.D., 2020
Cum laude
Honor Council - Investigative Committee
Public Service Advisory Board - Pro Bono Committee Chair
Washington University Journal of Law and Policy - Associate Editor
University of North Carolina – Chapel Hill, B.A. Public Policy, 2016