Justin T. Yedor

Partner

Los Angeles
T +1.310.979.8405
F +1.310.820.8859

Overview

Justin Yedor partners with clients to develop creative solutions to data privacy challenges. He is a thought leader on California privacy law, and a go-to advisor on the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Justin is a trusted advisor to clients as they make strategic decisions within the framework of California and other U.S. data privacy and consumer protection laws. He provides insightful advice and strategies for compliance with privacy requirements facing businesses in the retail, consumer services, entertainment, communications, financial and manufacturing sectors. Justin holds the CIPP/US credential as a Certified Information Privacy Professional from the International Association of Privacy Professionals (IAPP). He also serves on the Executive Committee of the Privacy and Cybersecurity Section of the Los Angeles County Bar Association.

Justin’s collaborative approach to counseling clients is informed by several years of litigation experience. He has advocated for clients in state and federal court on a broad array of matters ranging from intellectual property disputes to products liability. His experience includes more than 100 successful motions, 50 oral arguments and taking and defending more than 50 lay witness and expert depositions.

Select Experience

  • Assisted hundreds of companies spanning multiple industries with implementing CCPA-compliant policies and practices that fit their products, customers and unique corporate identities.
  • Advises and supports clients navigating the next wave of U.S. privacy laws, including CPRA, the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CoPA), the Connecticut Data Privacy Act (CTDPA) and the Utah Consumer Privacy Act (UCPA).
  • Counsels clients on vendor management, data mapping, data subject access requests and leveraging existing resources to achieve privacy compliance.
More »

Experience

  • Assisted hundreds of companies spanning multiple industries with implementing CCPA-compliant policies and practices that fit their products, customers and unique corporate identities.
  • Advises and supports clients navigating the next wave of U.S. privacy laws, including CPRA, the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CoPA), the Connecticut Data Privacy Act and the Utah Consumer Privacy Act (UCPA).
  • Counsels clients on vendor management, data mapping, data subject access requests and leveraging existing resources to achieve privacy compliance.
  • Deep experience implementing privacy compliance programs, from embedding with IT and marketing teams to build solutions, to designing workflows and developing processes to handle privacy rights requests.
  • Negotiates and drafts privacy and data security terms for agreements relating to marketing, cloud hosting, order fulfillment and other relationships involving the transfer or sharing of personal information.
  • Partnering with clients to design and launch loyalty and rewards programs.
  • Advises clients on a broad array of privacy regulations such as the EU General Data Protection Regulation (GDPR), the Chinese Personal Information Protection Law (PIPL), the Gramm-Leach-Bliley Act (GLBA), the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA) and the Children’s Online Privacy Protection Act (COPPA). Justin’s experience includes helping clients to comply with the UK’s Age-Appropriate Design Code (a/k/a the “Children’s Code”).
  • Secondment at major motion picture studio, providing legal and operational support for CPRA compliance initiative, among other projects involving U.S. and international privacy laws.
  • Secondment at an international manufacturer of water, gas and electric “smart metering” products. Negotiated agreements concerning product sales, intellectual property and Federal Communications Commission radio spectrum.

Recognitions and Memberships

Recognitions

  • American Lawyer Media, The Recorder: "2020 California Trailblazer"

Memberships

  • Los Angeles Bar Association, Large Firms, Privacy and Cybersecurity Section
    • Executive Committee Vice Chairperson (2020 to 2022)
  • International Association of Privacy Professionals (IAPP)
    • Certified Information Privacy Professional (CIPP)
  • Los Angeles County Bar Association
  • North Carolina Bar Association

Admissions

  • U.S. Court of Appeals, Fourth Circuit
  • U.S. Court of Appeals, Ninth Circuit
  • U.S. District Court, Central District of California
  • U.S. District Court, Eastern District of California
  • U.S. District Court, Eastern District of North Carolina
  • U.S. District Court, Middle District of North Carolina
  • U.S. District Court, Northern District of California
  • U.S. District Court, Southern District of California
  • U.S. District Court, Western District of North Carolina
  • California
  • North Carolina

Education

  • J.D., Duke University School of Law, 2012, cum laude; Duke Journal of Constitutional Law & Public Policy, Executive Editor
  • B.A., College of William and Mary, 2007, cum laude

Languages

  • French

Blog

In The Blogs

Previous Next
Data Counsel
2023 DSIR Report Deeper Dive: U.S. Employee Privacy Developments
By Frederick C. Bingham, Jennifer L. Mitchell, Justin T. Yedor
May 30, 2023
Among the many developments in data privacy regulation that took place over the past year, new requirements relating to employee personal information in California and New York have deservedly received a lot of attention. Meanwhile...
Read More ->
Data Counsel
Privacy vs. Perks: Comparing the CCPA's Notice of Financial Incentive and the Colorado Privacy Act's Bona Fide Loyalty Program Rules
By Jiwon (Jamie) Kim, Justin T. Yedor
May 4, 2023
What is loyalty? Ask a mob boss, a Los Angeles Lakers fan and a Labrador retriever, and you might get three different answers. Ask a retailer, and they’ll likely tell you that a loyalty program can be a great tool for rewarding their best...
Read More ->
Data Counsel
Iowa Becomes the Sixth U.S. State to Pass a Comprehensive Consumer Privacy Law
By Sherman G. Helenese, Justin T. Yedor
March 31, 2023
On March 29, 2023, Iowa became the sixth U.S. state to pass comprehensive consumer privacy legislation. The new law will go into effect on January 1, 2025. Iowa’s privacy law bears substantial similarity to the Virginia, Colorado...
Read More ->
Data Counsel
California's Landmark Age-Appropriate Design Code Act: What You Need to Know
By Christine Mastromonaco, Jennifer L. Mitchell, Jeewon K. Serrato, Justin T. Yedor
September 8, 2022
On Aug. 29, California’s Senate unanimously passed Assembly Bill 2273, known as the Age-Appropriate Design Code Act (the CA AADC or the Bill). The Bill, which is anticipated to be signed into law by Gov. Gavin Newsom, is aimed at promoting...
Read More ->
Data Counsel
DSIR Deeper Dive: Are you ready for the CPRA?
By Justin T. Yedor
July 12, 2022
In sports, they sometimes call it a rebuilding year – the team hires new players or a new coach, restructures, updates strategy, and prepares for the next season. In the world of California privacy compliance, 2021 was a rebuilding year...
Read More ->