About
Christine is a senior associate in our Data Privacy and Security practice in San Francisco, focused on helping clients develop privacy and data protection strategies, modernize data compliance programs for our data-driven future, and negotiate agreements to leverage and protect data. Christine regularly advises on data use, regulatory and enforcement developments, and cross-functional data objectives to meet the challenges of the evolving privacy and cybersecurity law landscape. Her work spans AI product counseling, cross-border regulatory and compliance matters, data-driven M&A diligence, and the design of global privacy and cybersecurity programs for clients ranging from early-stage consumer AI companies to major technology and defense contractors. Christine is a Certified Information Privacy Professional/United States (CIPP/US).
Christine is a thought leader on data privacy and cybersecurity issues, writing and speaking regularly on the rapid developments shaping the regulatory landscape. Her published work addresses topics such as California's Delete Act and data broker regulation, the California Privacy Protection Agency's proposed regulations on automated decision-making technology, cybersecurity audits, and privacy risk assessments, state privacy law developments including updates to the Colorado Privacy Act rules, and frontier AI regulation such as California's SB 53 Transparency in Frontier Artificial Intelligence Act. Her insights have appeared in leading industry publications, including the National Law Review and Competition Policy International TechREG Chronicle. Christine is also a frequent speaker, having presented on privacy and AI trends in M&A and...
Christine's recent experience includes:
- advising a major, award-winning data analytics company and American defense contractor on privacy and data counseling, including policy reviews, data subject requests under new US privacy laws, use of AI tools, and in-platform user data processing;
- acting as ongoing product counsel for a global payments technology company on a new line of global cybersecurity services, advising on laws regulating cybersecurity services across multiple jurisdictions, AI use, wiretap and surveillance issues, data privacy regimes, and international data transfers and localization;
- advising a global oil and gas company on multi-jurisdictional cybersecurity compliance, including electronic communications monitoring laws, security implementations, and biometric data processing in the context of AI CCTV monitoring services under rapidly developing state biometric and AI laws;
- assisting a global social networking platform in assessing a consumer app for potential acquisition, issue-spotting on a recent data breach, bias and discrimination in data processing, facial recognition technology, background check laws, sensitive personal information, and US privacy litigation considerations;
- advising a European-based consumer health app company on a multi-phase privacy compliance project for its US expansion, including identifying applicable US state privacy laws such as the CCPA and Washington My Health My Data Act, performing a gap analysis, updating privacy notices and policies, and presenting findings and remediation recommendations to the board;
- advising the company behind a leading global board management software on a wide spectrum of privacy and data processing considerations, including its Master Services Agreement with customers, controller versus processor assessments, service provider agreements, and integration of AI tools;
- advising an award-winning wearable AI device company on AI terms and disclosures, in-product notices, US state privacy law compliance, and features such as camera-based surroundings analysis and a voice-cloning translation feature, including opt-in/opt-out and settings guidance; and
- supporting multibillions of dollars in corporate deals, including a major technology company's pending $32 billion acquisition of a cybersecurity firm, a cybersecurity vendor's acquisition of a SaaS security leader, and an enterprise software company's acquisition of an early-stage agentic AI company, conducting deep review of agentic AI data flows, AI model training and data segregation practices, and privacy measures.
Christine Chong
One Bush Street
17th Floor
San Francisco, CA 94104