Careers

Diversity

With 17 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Rutkowski joins panel discussion about AI use in marketing

Reid says Congress should broaden (not curtail) nonprofit free speech rules

Antitrust Advocate

State Attorneys General Take a Strong Pro-Enforcement Stance in Comments to Draft Merger Guidelines

Examining the context, impact of Ohio high court tax statute decision

Jeewon&nbsp;is co-lead of the Digital Transformation and Data Economy team, San Francisco Leader of the Digital Assets and Data Management Group and co-lead of the U.S. Consumer Privacy practice at BakerHostetler. Her practice focuses on guiding organizations through periods of transformation and change, whether it is driven by innovation or crisis management. She counsels clients in the areas of consumer privacy, cybersecurity, data optimization and data science.

Drawing from her experience working on Capitol Hill and serving as head privacy executive for a global data broker and a publicly traded financial services company with $3.5 trillion in assets, Jeewon assists clients in pivoting their business models, accelerating growth as a new business&nbsp;and developing strategic acquisition, exit or divestiture plans.

Jeewon understands how digital strategy and data assets can shape the direction of a business’s corporate roadmap and she advises C-suite level executives on the impact that critical business events involving technology and data can have on the employees, customers and the bottom line. Jeewon has led initiatives to design and execute compliance programs for international corporations, as well as negotiate cross-border M&amp;A deals, and advise on high-stakes investigation and dispute matters. She has a thorough understanding of U.S. and global privacy regulations, including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). Utilizing this knowledge, she helps companies create enterprise-wide privacy and data strategy programs from the ground up, assists in testing critical vulnerabilities and performs risk assessments. Having handled and managed hundreds of data breach incidents and internal investigations, she also works with companies to prepare crisis management policies and data breach response plans.

Jeewon formerly served on the U.S. Department of Homeland Security Data Privacy and Integrity Advisory Committee and as Inaugural Chair of the California Lawyers Association’s Privacy Law Section Executive Committee. She maintains an active U.S. Secret Clearance. She is also co-author of the International Association of Privacy Professionals (IAPP) publication, Data Processing Agreements: Coordination, Drafting and Negotiation (2019) and the “International Personal Data Protection and Cross-Border Data Transfers” chapter of Privacy Compliance and Litigation in California (2021), a publication of the Continuing Education of the Bar (CEB), a non-profit program of the University of California.

core/freeform

J.D., University of California, Berkeley School of Law, 2004

B.A., University of California, Berkeley, 2001

International Program of Political Science and Social Sciences, Institut d'Etudes Politiques de Paris, 2000

<ul>
<li>The Legal 500 United States (2019, 2022)
<ul>
<li>Recommended in Media, Technology and Telecoms: Cyber Law (including Data Privacy and Data Protections) (2022)</li>
<li>Recommended in General Commercial Disputes (2019)</li>
</ul>
</li>
<li>Cybersecurity Docket &#8220;Incident Response 30&#8221; (2018)</li>
<li>National Law Journal Cybersecurity Trailblazer (2017)</li>
<li>International Association of Privacy Professionals, Certified Information Privacy Professional (CIPP/US)</li>
</ul>

San Francisco

Panel discusses AI and how to embed it with human values

Data Counsel

California Unveils New Draft Requirements for Privacy Risk Assessments, Cybersecurity Audits and AI

California Privacy Protection Agency Turns its Attention to Connected Vehicles

Jeewon Serrato, Cory Davis and Leah Fisher Speak at DEI Roundtable, Celebration

2023 Advertising CLE Webinar Showcase

BakerHostetler Earns Top Diversity Honors From Meta for Second Year in a Row

Privacy ‘Deep in the Heart of Texas’: An Overview of the Texas Data Privacy and Security Act

Ted Kobus and Jeewon Serrato Address Privacy and Ransomware at Summit

Jeewon Serrato, Jennifer Mitchell, Scott Koller and Taylor Bloom Take Part in Privacy Summit

Jeewon Serrato and Jamie Kim Discuss California’s New Social Media Content Moderation Law and Related Legislative and Litigation Trends

Jeewon Serrato Appointed Chair of California State Bar Group Assessing Need for Privacy Law Specialty

Jeewon Serrato Says Companies Should Better Communicate the Value of Data Collection to Consumers

Jeewon Serrato Takes Part in ACC Webinar About First CCPA Enforcement Settlement

CCPA/CPRA Rulemaking Update: What to Expect

Jeewon Serrato Discusses CCPA Enforcement at Privacy Tech Conference

California’s AB 587: What You Need to Know About Social Media Content Moderation

Jeewon Serrato Discusses CCPA Enforcement Action at Special IAB Legal Affairs Council Meeting

Jeewon Serrato Sheds Light on Ad Tech at Cybersecurity and Privacy Law Conference

Jeewon Serrato Enlightens Audience on Succeeding in Privacy Law at LinkedIn Live Webinar

White House Releases First-Ever Comprehensive Framework for Responsible Development of Digital Assets

Jeewon Serrato Discusses CPRA Enforcement Trends and Risk Mitigation at IAPP Conference

Jeewon Serrato Discusses Operationalizing Privacy at UC Hastings Privacy Day

California’s Landmark Age-Appropriate Design Code Act: What You Need to Know

Andreas Kaltsounis and Jeewon Serrato Speak at National Institute on Cybersecurity and Data Risk

CCPA Employee and B2B Exemptions Set to Expire on Jan. 1, 2023

CCPA Enforcement Webinar

CCPA Employee Exemption Set to Expire on Jan. 1

Jeewon Serrato Is Quoted in Global Data Review on Big Tech Antitrust Bill

BakerHostetler Recognized as Diversity Champion by Client Meta

Jeewon Serrato, Jerel Pacis Agatep and Jenny Ha Author Article on Worker Monitoring and Privacy in the Context of Remote Work

CPPA Publishes Notice of Proposed Rulemaking

Jeewon Serrato Interviews California Privacy Protection Agency Executive Director and Acting GC

BakerHostetler Attorneys, Practice Areas Shine in The Legal 500 2022 Guide

Jeewon Serrato and Jerel Pacis Agatep Address Implications if California Privacy Law Expands

CPPA Begins CPRA Rulemaking

Jeewon Serrato Quoted in Article about New Compliance Requirements

Jeewon Serrato Moderates CLA Legislative Day Session with the Office of California Governor

Jeewon Serrato and David Sherman Speak at Global Privacy Summit

Jeewon Serrato Speaks at Southern California IT Leadership Summit

CPRA Rulemaking Explained and CPRA Amendments Push Forward, Including Employee and Business-to-Business Exemptions

CPRA Regulations Postponed

Jeewon Serrato Discusses Link Between Privacy Laws and Cutting-Edge Technologies

California AG Focuses CCPA Enforcement on Loyalty Programs

Jeewon Serrato Provides California Privacy Law Update

Linda Goldstein, Gerald Ferguson, Fernando Bohorquez, Jeewon Serrato, Justin Yedor Discuss AdTech Regulation and Compliance

US Facial Recognition Firm Ordered to Stop Processing UK and Australian Data and Pay Fine Over Privacy Law Violations

Federal Banking Regulators Issue 36-Hour Computer-Security Incident Notification Requirement

BakerHosts

The Four Areas Online Merchants and E-Commerce Companies Must Know About Cryptocurrency

Jeewon Serrato, Nichole Sterling Update Chapter on International Personal Data, Cross-Border Data Transfers

Jeewon Serrato Joins Panel Discussion of Privacy Framework Regulatory Crosswalks

Jeewon Serrato a Presenter for CLE Webinar on CCPA Enforcement

California Privacy Protection Agency Board Chair Discusses CPRA Rulemaking Process and Agency Authority

8 Key Takeaways for Initial Defenses Under the CCPA and CPRA

CPRA Rulemaking Begins with an Invitation by the New California Privacy Protection Agency

SEC Brings First Ever Securities Fraud Charges Against Alternative Data Provider

BakerHostetler Attorneys, Practice Areas Recognized in The Legal 500 Guide for 2021

Everywhere Commerce: Top Strategies for Mitigating Risk

Jeewon Serrato Speaks on Three Key CCPA Provisions

Jeewon Serrato Joins Webinar on Lessons Learned from CCPA

Jeewon Serrato Discusses California Privacy Rights Act

Jeewon Kim Serrato Speaks on Ransomware and Supply Chain Attacks

Welcome to the Digital Transformation and Data Economy Newsletter – March 2021 Issue

New Taxes on the Digital Economy: A Closer Look at the New York Data Tax Proposal

Welcome to the Digital Transformation and Data Economy Newsletter – February 2021 Issue

Happy First Birthday to the NIST Privacy Framework!

Jeewon Serrato Co-Authors Article on CCPA and Competition Issues

Jeewon Serrato Speaks on Privacy and Employment Law in California

Jeewon Serrato Provides CCPA Crosswalk to NIST

Jeewon Serrato Joins Panel to Discuss CCPA and CPRA

Jeewon Serrato Hosts Online Holiday Party for Minority Bar Associations

Jeewon Serrato Elected as Chair of California Lawyers Association’s New Privacy Law Section

BakerHostetler Co-Hosts Virtual Networking, Wine Tasting Evening with California Association of Black Lawyers

Jeewon Kim Serrato Joins Roundtable Discussion of Privacy During the Pandemic

Jeewon Kim Serrato Co-Authors Article about Pricing, Value of Consumer Data and CCPA’s Non-Discrimination Requirement

Jeewon Kim Serrato Co-Authors Article on CCPA’s Non-Discrimination Requirement

Jeewon Serrato Address California Privacy Legislation at National Conference

Return to Work: What Employers Should Know About AB 1281, CCPA Notice Requirements and Recent Labor Law Guidance

CCPA Final Regulations, with a Few Unexpected Changes

Jeewon Serrato Discusses California Privacy Regulations at Virtual Conference

Blurred Lines: Focusing on Antitrust and Privacy

5 Key Things to Know about the Landmark Schrems II Decision

California AG Begins CCPA Enforcement

Ann O’Brien, Jeewon Serrato, Alyse Stach Author Article Examining Privacy and Antitrust Issues

Alan Friel, Jeewon Serrato Lead Webinar on CCPA Response

CCPA Final Regulations Published in Advance of July 1 Enforcement Date

Leveraging Business Model Uncertainty to Drive Digital Transformation and Smart Data Strategies

Digital Transformation and Data Economy Webinar Series

Legal Implications Surrounding COVID-19 Webinar Series: Part 4 – How to Navigate Your Exit

CCPA Compliance Meets Trade Secret Protection: A Peaceful Coexistence?

Positioning for What’s Beyond the Horizon: What Digital Transformation and the Data Economy Mean for You

Positioning for What’s Beyond the Horizon: What Digital Transformation and The Data Economy Mean for You

Legal Implications Surrounding COVID-19 Webinar Series: Part 1 – Positioning for What’s Beyond the Horizon: What Digital Transformation and The Data Economy Mean for You

Digital Transformation and Data Economy Four-Part Webinar Series

Meeting Client Needs:  Our New Digital Transformation and Data Economy Team

BakerHostetler’s Digital Assets and Data Management Practice Launches New Digital Transformation and Data Economy Team and Adds Jeewon Serrato as San Francisco-based Co-Lead

Addition of Digital Transformation, Data Economy Team, Co-Led by New Partner Jeewon Kim Serrato

Noncompete and Trade Secrets

Enterprise Issues

Digital Assets and Data Management

Software

Comprehensive State Privacy Acts

Privacy Governance and Technology Transactions

Digital Risk Advisory and Cybersecurity

Emerging Technology

Digital Transformation and Data Economy

Healthcare Technology

Russia-Ukraine War Resource Center

Digital Assets Executive Order Resource Center

Industries

Media and Telecommunications

Energy

Healthcare

<ul>
<li>Acted as Chief Privacy Officer for a major U.S. financial services institution, in charge of the enterprise program for all data protection, privacy and cybersecurity risks.</li>
<li>Handled and managed over 600 information security incidents, including attacks involving nation state actors and insider threat issues.</li>
<li>Assisted in responding to CCPA Notice of Violation letters from the California Office of the Attorney General for several industry clients, including retail and financial services.</li>
<li>Assisted in developing digital transformation and data economy strategies, programs, platforms, products and services.</li>
<li>Developed incident response programs, and drafted, implemented and tested incident response plans for companies in a variety of industries, including financial services, healthcare, retail, hospitality, technology, communications and energy.</li>
<li>Developed and conducted training for various levels of employees, including legal, IT, IS, business lines, marketing departments, and senior management and boards on privacy and cybersecurity risks.</li>
<li>Provided product counseling and regulatory advice related to 500 e-commerce products and 20 mobile apps globally.</li>
<li>Advised on biometric law requirements for new AR/VR product development and global launches.</li>
<li>Experience conducting privacy and cybersecurity risk assessments and data mapping for facial recognition products and services.</li>
<li>Advised on payment products and e-commerce integration for social media and other digital platforms.</li>
<li>Assisted in developing AI ethics strategies and testing.</li>
<li>Advised retail clients on AdTech and data monetization strategies for loyalty program data.</li>
<li>Experience providing legal advice for and operationalizing a 150-person consumer dispute and data quality support center which handled over 20,000 inquiries per year.</li>
<li>Experience advising in major M&amp;A transactions, including a global industrial company about notice and consent laws in 60 countries.</li>
<li>Experience working on over 4,000 GDPR-related contracts and cross-border data transfer agreements.</li>
<li>Provided advice to companies relating to data collection, use and transfer for emerging technologies such as biometric solutions, Big Data, Internet of Things (IoT) and artificial intelligence (AI).</li>
</ul>

Jeewon K. Serrato

Jeewon K. Serrato

Experience

Recognitions and Memberships

Insights and News

Prior Positions

Credentials

Languages

Community and Pro Bono

Areas of Focus

Enterprise Issues

Industries

Services

Featured Insights