James C. Chou
Managing Associate
Biography
James Chou assists clients in a wide range of regulatory, compliance, corporate and transactional matters. His transactional work includes mergers and acquisitions, joint ventures, credit facilities and vendor agreements. His regulatory practice focuses on regulatory compliance, cybersecurity and privacy.
Publications
"What the new information security reporting standards mean for financial institutions" by Jeffrey P. Naimon and James C. Chou (Cybersecurity Law Report)
Regulators recently proposed new rules that would require banking institutions to notify their primary regulators of some computer-security incidents within 36 hours, and service providers to notify regulated entities as soon as possible of any incident affecting its operations for four hours or...
Articles"Data security best practices for licensed lenders' telework" by Sherry-Maria Safchuk and James C. Chou (Law360)
State-licensed/registered brokers, lenders and servicers have increased their focus on data security as the spread of COVID-19 has extended work-from-home orders, and what now seems to be a lasting acceptance of remote work means that the tools used to secure data will remain relevant when the...
Articles"Reopening well: Balancing employee privacy with employee safety" by Elizabeth E. McGinn, Amanda R. Lawrence, and James C. Chou (Corporate Compliance Insights)
Consumer privacy has been a key area of focus over the past several years, but as companies begin return-to-work operations, they discover that employee privacy looms large as well. Well-intentioned companies seeking to keep employees safe risk incurring penalties from a variety of agencies based...
Articles"Adjusting information security for long-term telework" by Amanda R. Lawrence, Elizabeth E. McGinn, and James C. Chou (Bloomberg Law)
Amid a fast-moving pandemic in the spring of 2020, many companies were forced to adopt remote-work operations almost overnight to maintain critical business functions. This approach initially seemed like a temporary and imperfect solution to maintaining workforce safety while continuing essential...
Articles"What constitutes reasonable security per Calif. privacy law?" by Amanda R. Lawrence and James C. Chou (Law360)
California Consumer Privacy Act compliance has been focused on developing the policies, procedures and infrastructure to support new privacy rights for California residents, which include, among other things, the right to know what personal information companies have on them, the right to delete...
Articles"Privacy and cybersecurity issues in 2020 – What to expect" by Amanda R. Lawrence, Elizabeth E. McGinn, and James C. Chou (Journal of Banking and Finance Law and Practice)
A steady drumbeat of data breaches and growing concern among consumers about how companies are using their personal information will keep regulators, policy-makers and private litigants focused on cybersecurity and privacy in 2020 and beyond. While Congress tentatively explores comprehensive...
Articles"Managing legal risks to U.S. companies from foreign cyberattacks" by Amanda R. Lawrence, Sasha Leonhardt, and James C. Chou (Cybersecurity Law Report)
Protecting online systems against individual hackers has been a top priority for companies for several years, but as we begin a new decade, a new threat has risen to the forefront: well-funded and sophisticated foreign governments seeking to wage a new kind of warfare on the United States. In...
Articles
Awards and Recognitions
Awards & Recognitions
- Army Civilian Meritorious Service Award
- Army Civilian Superior Service Award
Education
- J.D., American University, 2017 (summa cum laude)
- M.S., George Mason University, 2008
- B.A., University of Virginia, 2005
Admissions
- District of Columbia
- New York
- U.S. Patent and Trademark Office
Government Service
- Senior Defense Analyst/Operations Research Analyst, US Army (2009-2018)
Memberships & Involvements
- Member, Asian Pacific American Bar Association of the Greater Washington DC Area
- Member, National Asian Pacific American Bar Association
- Member, New York Bar Association
- CISSP-certified professional, Information Systems Audit and Control Association
- CDPSE-certified professional, Information Systems Audit and Control Association