Jennifer E. Costa

She | Her | Hers

Counsel

Houston
T +1.713.646.1344
F +1.713.751.1717

Overview

Jenn Costa has been a privacy professional for nearly 15 years and leverages her experience as general counsel for a publicly traded retailer to advise clients on a wide range of privacy issues, including board responsibility for oversight of cyber risk. She has handled the response to hundreds of data breaches involving a variety of different industries and for clients ranging from small to very large, including multinational public corporations.

Efficient and practical, Jenn has a thorough understanding of the client mentality when it comes to creating and abiding by data privacy programs, and skillfully balances regulatory compliance with her clients’ business goals. Drawing from her experience as a public company general counsel, Jenn works with clients to construct privacy programs and incident response plans for their businesses. Having developed and led privacy and incident response for national retailers, she has extensive experience advising boards, creating risk impact assessments and providing strategic advice to minimize risk. Through the development and management of these privacy programs, she worked closely with technology professionals and business stakeholders on the implementation of new ecommerce point of sale systems and payment gateways.

Select Experience

  • Advised clients in the retail, hospitality, manufacturing, energy, legal and financial sectors on responding to cybersecurity and data privacy incidents in the U.S., Canada and Europe ranging from phishing incidents to sophisticated network intrusions.
  • Led response to online payment card skimming incidents (sometimes referred to as Magecart attacks) for multiple omnichannel retailers.
  • Advised on incident response preparedness, including development of written incident response plans, formation of cyber risk steering committees and conducting tabletop exercises to test plans.
More »

Experience

  • Advised clients in the retail, hospitality, manufacturing, energy, legal and financial sectors on responding to cybersecurity and data privacy incidents in the U.S., Canada and Europe ranging from phishing incidents to sophisticated network intrusions.
  • Led response to online payment card skimming incidents (sometimes referred to as Magecart attacks) for multiple omnichannel retailers.
  • Advised on incident response preparedness, including development of written incident response plans, formation of cyber risk steering committees and conducting tabletop exercises to test plans.
  • Led privacy and cyber risk assessment, and CCPA and PCI compliance projects for retailer preparing for initial public offering.
  • Performed assessment of directors for execution of duty of board oversight of cyber risk based upon NACD guidance and NIST cybersecurity framework, and presented findings to audit committee of publicly traded retailer.
  • Conducted due diligence related to privacy and cybersecurity issues for mergers and acquisitions. Advised clients on incident response preparedness, including development of written response plans and leading tabletop exercises.
  • Negotiated wide variety of contracts, including payment processing, managed security services and incident response service providers.
  • Advised on video game contests, game and media rights licensing, and esports league operations.

Recognitions and Memberships

Recognitions

  • Certified Information Privacy Professional/US (CIPP/US)

Memberships

  • International Association of Privacy Professionals (IAPP)

Community

  • Dress for Success

Prior Positions

  • Stage Stores: Senior Vice President, General Counsel, Secretary and Privacy Officer
  • Big Lots: Counsel
  • Championship Gaming Series, LLC: General Counsel

Admissions

  • California
  • [Not admitted in Texas]

Education

  • J.D., University of California, Davis School of Law, 1997; U.C. Davis Law Review, Editor; U.C. Davis Journal of International Law and Policy, Contributor
  • B.A., University of California, Los Angeles, 1993