Cecilia Kim

Cecilia advises clients on privacy, cybersecurity, artificial intelligence and data protection matters across US and international jurisdictions. She helps companies navigate evolving privacy laws, develop and maintain compliance programs, address data processing and cross-border privacy issues, and assess emerging regulatory requirements.

Cecilia also advises global companies on cybersecurity incidents and data breaches, including assessing breach notification and regulatory obligations, coordinating response efforts and developing risk mitigation strategies across multiple jurisdictions. She drafts and negotiates data processing agreements, counsels clients on the applicability of US state and international privacy laws, and conducts privacy and cybersecurity due diligence in connection with corporate transactions. Her experience also includes advising on emerging AI, biometric and facial recognition laws and helping clients adapt policies, notices and compliance practices to new technologies and uses of data.

Cecilia earned her JD from Brooklyn Law School, where she was a New York City Bar Association Diversity Fellow and served as a judicial intern for the US Bankruptcy Court for the Eastern District of New York. During law school, she authored “Data Scraping for Generative AI – To What Extent?” published in the Brooklyn Journal of Corporate, Financial & Commercial Law, which examines copyright and fair use issues arising from data scraping for generative AI.

Cecilia received her BA from New York University. She is admitted to practice in New York and is fluent in English and Korean and proficient in Chinese.

Publications

• Co-author, "California Enacts New Restrictions on AI-Based Employee Monitoring,” NYU Program on Corporate Compliance and Enforcement, October 2026
• Co-author, “AB 56: Social media health risk warning for minors,” Daily Journal, January 2026