Advises on privacy strategy to align compliance programs with business goals.
Steers clients through complex privacy laws at state, federal, and global levels, including GDPR, HIPAA, CCPA, and comprehensive U.S. state privacy laws.
Crafts tailored privacy policies and compliance frameworks.
Reviews commercial contracts for privacy compliance and alignment of terms with client business objectives.
Leads response to cyber incidents and data breach crises.
FUN FACT!
Bread devotee who prefers tasting to baking.
About Joyce
Joyce Kim is a skilled privacy professional with a focus on resolving complex privacy matters, covering topics such as, uses of consumer data, cookies and tracking technologies, data subject access requests, and data transfers. She has a particular mastery for drafting internal and consumer-facing policies, helping clients shape their business practices to safeguard privacy and stay compliant. Joyce is passionate about tracking evolving privacy legislation to keep clients well-informed of developments that may impact their operations.
Joyce also brings a wealth of experience and versatile set of skills as a result of her litigation and M&A experience. As a corporate finance associate, Joyce advised on M&A transactions by conducting due diligence and preparing critical agreements. Her strong advocacy skills also stem from representing clients in legal disputes concerning real estate, antitrust, employment, products liability, commercial contracts, and intellectual property rights.
Joyce is a member of the International Association of Privacy Professionals and is a certified CIPP/US.
“Joyce’s partnership during a complex, year-long cybersecurity and HIPAA compliance response proved indispensable to our organization’s success. She met every obstacle with patience and grace. Her insight and counsel transformed what could have been an exhausting compliance exercise into a collaborative, mission-aligned endeavor.”
Representative Experience
Advises on complex privacy matters including consumer data rights, cookies and tracking technologies, biometric information, and AI applications.
Monitors evolving privacy regulations and provides strategic compliance guidance across multiple jurisdictions.
Drafts tailored internal and consumer-facing privacy policies to align with business operations and legal requirements.
Guides cross-border data transfers and data-sharing frameworks.
Prepares data protection impact assessments (DPIAs) and related compliance documentation.
Represents clients in regulatory inquiries and privacy investigations.
Supports M&A transactions through due diligence of contracts, IP documentation, general corporate, and litigation matters to identify potential risks and solutions.
Leverages prior litigation experience in disputes involving real estate, antitrust, employment, product liability, commercial contracts, and IP rights.
Representative Publications
“Gift Card Cash-Out Threshold Jumps to $15 in California,” American Legal Blogger, October 2025
“Amazon pays $2.5 Billion to Settle FTC Claim over Prime Subscriptions,” Lexology, September 2025
Practice Areas
Privacy & Data Security
Advertising & Marketing
PROFESSIONAL ASSOCIATIONS
National Asian American Pacific Bar Association (NAPABA)
Association of National Advertisers (ANA)
International Association of Privacy Professionals, CIPP/US
BAR ADMISSION
Illinois 2021
Education
Washington University School of Law, J.D., 2020
Cum laude
Honor Council - Investigative Committee
Public Service Advisory Board - Pro Bono Committee Chair
Washington University Journal of Law and Policy - Associate Editor
University of North Carolina – Chapel Hill, B.A. Public Policy, 2016