Photo of Kim Phan

Kim is a partner in the firm’s Privacy + Cyber Practice Group, where she is a privacy and data security attorney, who also assists companies with data breach prevention and response, including establishing effective security programs prior to a data breach and the assessment of breach response obligations following a breach.

On July 29, New York State’s Department of Financial Services (NYDFS) released draft amendments (Draft Amendments) to its Part 500 Cybersecurity Regulation for financial service companies that, among others things: (1) contain significant changes regarding ransomware; (2) propose a new class comprising larger entities, which will be subject to increased obligations for their cybersecurity programs;

Eight national banking trade groups — the American Bankers Association, Consumer Bankers Association, Credit Union National Association, Housing Policy Council, Independent Community Bankers of America, National Association of Federally-Insured Credit Unions, National Bankers Association, and The Clearing House Association — petitioned the Consumer Financial Protection Bureau (CFPB) to extend its supervision to “data aggregators.” This

An amendment to the National Defense Authorization Act passed by the House in July would create a “systemically important entity” designation, applying new regulations and offering priority aid to certain critical infrastructure companies. But the American Bankers Association and Bank Policy Institute say the amendment as applied to financial institutions would duplicate existing regulations under

On March 1, the Consumer Financial Protection Bureau (CFPB) released a report highlighting the effect of medical collections on consumer credit reports. The CFPB found that medical collections tradelines appeared on 43 million credit reports, and past-due medical debt is more prevalent among Black and Hispanic individuals. That same month, the three nationwide consumer reporting

Please join Troutman Pepper Partners Kim Phan and James Kim as they discuss the firm’s expanded capabilities in the fintech world, recent compliance issues for fintech companies, the CFPB’s dormant authority to supervise certain nonbank entities and its potential impact on fintech companies, as well as the CFPB’s trend to name individuals in enforcement actions.

CDIA’s Annual Law and Industry Conference

Webinar: Driving Change: Litigation & Enforcement Developments in the Consumer Reporting Industry

Troutman Pepper attorney David N. Anthony joined forces with Eric Ellman, Senior Vice President of Public Policy & Legal Affairs for the Consumer Data Industry Association and Rebecca Kuehn of Hudson Cook, on June 8 to deliver

On May 25, the Consumer Financial Protection Bureau (CFPB or Bureau) published a blog post, examining what it describes as the “practice of suppressing payment data.”

Per the blog post, the CFPB alleges that its research conducted in 2020 “uncovered that only about half of the largest credit card companies contribute data to credit

Thursday, May 26 • 12:00 – 1:00 p.m. ET

California was the first state to enact a comprehensive state privacy bill with the California Consumer Privacy Act of 2018 (CCPA). Although the CCPA went into effect on January 1, 2020, it was significantly overhauled during California’s November 2020 General Election, when the California Privacy Rights

On May 11, the Senate voted 51-50 to confirm Alvaro Bedoya as a member of the Federal Trade Commission (FTC), requiring Vice President Kamala Harris to cast the tie-breaking vote. Bedoya gives Democrats a 3-2 majority at the consumer protection agency.

Bedoya’s confirmation was not a sure thing. Republicans held up his nomination for eight