Kim Phan

Kim Phan counsels clients on privacy and data security laws, assists with data breach prevention and response, and provides guidance to clients on regulatory compliance matters. Her practice and experience spans industries including consumer financial services, retail, hospitality, higher education and utilities.

Ms. Phan has provided extensive counseling to clients in areas of e-commerce, mobile and social media. She has also successfully represented clients through investigations by the Federal Trade Commission, departments of consumer protection and state attorneys general and counseled a national consumer reporting agency through its Consumer Financial Protection Bureau compliance obligations.


Past Appearances

  • Open Source Data Security – Penn Law IP Summit, Philadelphia, Pennsylvania, March 27, 2018
  • Technology Roundtable – RMA Conference, Las Vegas, Nevada, February 6–8, 2018
  • ID Verification – ABA Consumer Financial Services meeting, Park City, Utah, January 6–9, 2018
  • Program on NYDFS Cybersecurity Regulations – Women in Housing and Finance, Inc., Washington DC, July 26, 2017
  • Network & System Architecture as a Defense – CISO Executive Network, Philadelphia, Pennsylvania, May 24, 2017
  • Data Privacy and Cyber Security – MBA's Legal Issues and Regulatory Compliance Conference, Miami, Florida, May 9, 2017
  • Digital Legal Hot Topics – RESPRO Annual Conference, Las Vegas, Nevada, April 20, 2017
  • My Cybersecurity Career Journey: Tips and Tools to Succeed – Women in Cybersecurity Conference, Tucson, Arizona, April 1, 2017
  • Panelist, The Consumer Regime for 2017 – Credit Union National Association Governmental Affairs Conference, Washington DC, February 28, 2017
  • You've Been Hacked: Now What? – NAPABA Conference 2016, San Diego, California, November 4, 2016
  • Privacy and Data Security – Pennsylvania Bar Institute Consumer Financial Services & Banking Law Update, Philadelphia, Pennsylvania, October 18, 2016
  • Attorneys in the Matrix: Legal Best Practices Against Black Hat Threats – Maryland Association of Counties Summer Conference, Ocean City, Maryland, August 16, 2016
  • Lavender Law Cybersecurity Workshop – Lavender Law Conference, Washington DC, August 4, 2016
  • The State of Cybersecurity Report – Association of Corporate Counsel, Philadelphia, Pennsylvania, February 18, 2016
  • Data Privacy and Data Security – Utah State Bar Fall Forum, Salt Lake City, Utah, November 19, 2015
  • Building a Best-in-Class Regulatory Function  – Public Affairs Council, Advocacy for Regulatory Success, Washington DC, October 27, 2015
  • Panelist, TCPA - Robocalls, Text Messages and the New FCC Ruling – Credit Union National Association webinar, September 1, 2015

Professional Activities

Ms. Phan is admitted to practice in Virginia, the US Supreme Court and the US District Court for the Eastern District of Virginia. She is a member of the American Bar Association and the National Asian Pacific American Bar Association and the board president of the Vietnamese American Bar Association of the Greater Washington DC area.

Insights & News


  • Education

    • JD, George Mason University School of Law, 2006

      Notes Editor, Federal Circuit Bar Journal, President, Student Bar Association
    • BA, University of Pennsylvania, 2001

      cum laude general honors, Benjamin Franklin Scholar
  • Admissions

    • District of Columbia

    • Virginia

    • United States Supreme Court