Antony (Tony) Kim is a partner in Orrick’s internationally recognized Cyber, Privacy & Data Innovation practice, which pursues “an aggressive yet practical approach” to data protection and innovation that “meets the needs of both in-house counsel and tech-savvy business clients.”
When faced with a cybersecurity crisis, companies call on Tony to help navigate critical legal, risk and reputational landmines. Tony has helped clients respond to hundreds of cyberattacks and data breaches. He has directed forensic investigations, cross-border notifications, and defended enforcement actions and civil litigation, in connection with incidents involving the personal information of employees and customers, including PCI/payment card data, as well as proprietary data and corporate trade secrets, on behalf of private and public companies as well as governmental entities.
Tony has also defended over fifty clients in regulatory investigations and enforcement actions by the Federal Trade Commission (FTC) and State Attorneys General. These investigations and enforcement matters have involved (i) cybersecurity and data breach incidents, (ii) privacy implications of innovative data use-cases, and (iii) consumer protection claims relating to online and offline sales & marketing and advertising practices — particularly in the retail e-commerce and fintech/consumer finance industries. Tony draws insights from his regulatory enforcement practice to inform his counseling work, where he regularly advises Legal, InfoSec/IT, Product/Marketing, and C-Suite/Board stakeholders on a host of governance, compliance, and risk mitigation strategies.
For his work on behalf of clients, the National Law Journal named Tony to its 2014 list of D.C. Rising Stars, a 40-under-40 group of “game changing” private, government and public interest attorneys. Based on surveys of general counsel and senior in-house lawyers, Tony was awarded the Client Choice Award by the International Law Office (ILO)/Lexology in 2015, and was named an Acritas Star Lawyer in 2016 and 2017. He is recognized in multiple legal guides and directories, including Chambers-U.S.A., The Legal 500-USA, Benchmark Litigation, Super Lawyers-D.C. Rising Stars, and The Cybersecurity Docket— which twice named Tony to its “Incident Response 30” list of the top professionals to call when facing a major cyberattack. In 2016, Law360 named Orrick’s Cyber, Privacy & Data Innovation practice “Practice Group of the Year” in the data privacy category.