Kim Phan

Kim Phan is a Partner at Troutman Pepper Locke, where she counsels mortgage companies and other financial institutions on privacy and data security law. Her practice focuses on compliance with key federal and state statutes, including the Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), the Telephone Consumer Protection Act (TCPA), and evolving state privacy frameworks such as the California Consumer Privacy Act (CCPA). Phan advises clients on integrating privacy and data security considerations throughout product development, marketing, and business operations. Her work includes helping organizations design and implement effective privacy and data security programs, as well as providing strategic guidance on regulatory compliance and risk management. She also assists companies with data breach prevention and response, including developing incident response plans, establishing security controls to reduce breach risk, and assessing legal and regulatory obligations following a data security incident.