With experience that combines business, legal, and technology, Jim takes a unique, integrated approach to meet his clients’ needs relating to global privacy compliance, innovative data uses, artificial intelligence, cybersecurity, breach response, litigation, and regulatory enforcements.

Overview
Insights
Awards

With experience that combines business, legal, and technology, Jim takes a unique, integrated approach to meet his clients’ needs relating to global privacy compliance, innovative data uses, artificial intelligence, cybersecurity, breach response, litigation, and regulatory enforcements.

Drawing on his experience and reputation with regulators, Jim also regularly advises companies on compliance practices and through regulatory investigations. His work has included serving as the lead subject matter expert designing security, privacy, and business solutions in several high-profile U.S. Federal Trade Commission (FTC) and U.S. Department of Health and Human Services’ Office of Civil Rights (OCR) enforcement proceedings involving social media, mobile, and health care companies. Among them are several cases that are the first of their kind, including:

  • The first two FTC privacy consent decrees
  • The first FTC “Comprehensive Information Security Program” case
  • The first four FTC “Comprehensive Privacy Program” cases
  • The first FTC mobile security and interactive TV cases
  • The first FTC Dark Patterns enforcement
  • The first health care AdTech enforcement
  • The two largest OCR HIPAA enforcements
  • The largest COPPA Enforcement

Before joining the firm, Jim led the privacy and cybersecurity practices of two Am Law 100 firms. In 2022, he was recognized by BTI as a “Client Service All-Star.” He also built and led the privacy, and co-led the cybersecurity practices at PricewaterhouseCoopers and Booz Allen. Jim has also held senior marketing, management, and legal positions at QVC and MaMaMedia.com (a children’s education internet startup) and was named inventor or co-inventor on six patent applications, relating to security and privacy-enhancing technologies.

  • Chambers Global USA: Privacy & Data Security, Nationwide (2020-2026)
  • Chambers USA: Privacy and Data Security, Nationwide (2019-2026)
  • Legal 500 United States: Cyber Law (including Data Privacy and Data Protection) (2017-2022, 2024-2025)
  • BTI Consulting: Privacy and Cybersecurity Client Service All-Star (2022)
  • National Law Journal, inaugural list of Cybersecurity Trailblazers

With experience that combines business, legal, and technology, Jim takes a unique, integrated approach to meet his clients’ needs relating to global privacy compliance, innovative data uses, artificial intelligence, cybersecurity, breach response, litigation, and regulatory enforcements.

Drawing on his experience and reputation with regulators, Jim also regularly advises companies on compliance practices and through regulatory investigations. His work has included serving as the lead subject matter expert designing security, privacy, and business solutions in several high-profile U.S. Federal Trade Commission (FTC) and U.S. Department of Health and Human Services’ Office of Civil Rights (OCR) enforcement proceedings involving social media, mobile, and health care companies. Among them are several cases that are the first of their kind, including:

  • The first two FTC privacy consent decrees
  • The first FTC “Comprehensive Information Security Program” case
  • The first four FTC “Comprehensive Privacy Program” cases
  • The first FTC mobile security and interactive TV cases
  • The first FTC Dark Patterns enforcement
  • The first health care AdTech enforcement
  • The two largest OCR HIPAA enforcements
  • The largest COPPA Enforcement

Before joining the firm, Jim led the privacy and cybersecurity practices of two Am Law 100 firms. In 2022, he was recognized by BTI as a “Client Service All-Star.” He also built and led the privacy, and co-led the cybersecurity practices at PricewaterhouseCoopers and Booz Allen. Jim has also held senior marketing, management, and legal positions at QVC and MaMaMedia.com (a children’s education internet startup) and was named inventor or co-inventor on six patent applications, relating to security and privacy-enhancing technologies.

  • Chambers Global USA: Privacy & Data Security, Nationwide (2020-2026)
  • Chambers USA: Privacy and Data Security, Nationwide (2019-2026)
  • Legal 500 United States: Cyber Law (including Data Privacy and Data Protection) (2017-2022, 2024-2025)
  • BTI Consulting: Privacy and Cybersecurity Client Service All-Star (2022)
  • National Law Journal, inaugural list of Cybersecurity Trailblazers
  • Co-founder, International Association of Privacy Professionals (IAPP); Certified Information Privacy Professional

Education

  • University of Miami School of Law, J.D.
  • Massachusetts Institute of Technology, B.A.

Bar Admissions

  • New York
  • Speaker, “Data Dilemmas: Unpacking the DOJ’s New Bulk Data Security Program With a Byte of Industry-Specific Insight,” Troutman Pepper Locke Webinar, October 22, 2025.
  • Speaker, “Privacy for Children and Teens Is Not Kid’s Play – Best Practices from Leaders to Avoid an FTC or State AG ‘Time Out’!” Privacy + Security Forum: Spring Academy, May 8, 2025.
  • Speaker, “Power, Privacy, and Protection: Unpacking Security Challenges in the Energy Sector,” Energy Law Insights, July 31, 2024.
  • Speaker, “Privacy Issues in the US and International,” Reinsurance Association of America’s “Re Contracts: The Art of Designing Reinsurance Contracts and Programs” Conference, July 25, 2024.
  • Co-panelist, “Cybersecurity Legal Incident Response Preparedness in Today’s Threat Landscape,” University of Texas Law CLE 2024 Technology Law Conference, May 23, 2024.
  • Moderator, “Updates on Lead Generation Activities, Expanded Definition of Data Brokers, Daniel’s Law and the Slew of Resulting Litigation,” Privacy + Security Forum: Spring Academy, May 9, 2024.
  • Speaker, “Buckle Up for a Wild Ride: Privacy, Security, and AI’s Whirlwind Year!” Troutman Pepper Webinar, March 15, 2024.
  • Speaker, “FTC Privacy Enforcement,” Georgia Bar Association’s 38th Annual Privacy & Technology Law Conference, March 6, 2024.
  • Moderator, “Navigating the Generative AI Landscape in Health Care and Life Sciences,” ACC GP – Health, Biotech & Pharma CLE Webinar, March 5, 2024.
  • Speaker, “Will Generative AI, Including ChatGPT, Transform Businesses and Law Firms?,” Practising Law Institute, November 13, 2023.
  • Speaker, “Managing AI – Risk, Reward & Regulation! – AI Discrimination and Emerging Best Practices,” Troutman Pepper, November 7, 2023.
  • Speaker, “Regulatory Approaches to AI,” State Bar of Michigan IT Law Section’s Annual Summit, September 21, 2023.
  • Speaker, “Navigating the AI Landscape: Privacy, IP, Policies and More – An Industry Expert Roundtable,” Troutman Pepper webinar, July 20, 2023.
  • Speaker, “Navigating the Critical Differences Between the CCPA and the CPRA,” Troutman Pepper, May 26, 2022.
  • Speaker, “Ten Essential Privacy & Security for High-Tech Founders,” StartX Stanford University Accelerator Founder Summit, July 21, 2021.
  • Speaker, “Five U.S. Privacy & Security Trends You Need to Know Now to Conduct Business in the U.S.,” Croatia Law Institute Privacy Law Summit, June 17, 2021.
  • Speaker, “Privacy & Security Frameworks,” TrustArc Privacy Risk Summit, March 10, 2021.
  • Speaker, “Cybersecurity Fireside Chat with Jim Koenig – Lessons Learned from the Front-Lines of Brazil’s Largest Cyber-Attack,” December 9, 2020.
  • Speaker, “Transferring Data Across a Schrems-Muddied Pond,” Bloomberg Law Webinar, September 2, 2020.
  • Speaker, “In a World … of Connected and Self-Driving Vehicles,” Jason Calcanis’s Inside Transportation Podcast (Ep. 15), July 27, 2020.
  • Panelist, “COVID-19: Return-to-Work and Track-and-Trace: CDC and Global Privacy Guidance and Benchmarking,” Privacy + Security Special Encore Webinar, June 9, 2020.
  • Speaker, “Managing Data Privacy Risk in an Unstable M&A Market,” Bloomberg Law Leadership Forum, June 8, 2020.
  • Speaker, “Pandemic Pandemonium: 10 Critical Actions for Companies to Balance Safety and Data Protection in a Chaotic World,” Privacy + Security Forum, May 7, 2020.
  • Speaker, “COVID-19 Response Communication Planning and Regulatory Guidance,” Industry Webinar, March 25, 2020.
  • Panelist, “Understanding the Current Landscape of Statewide Privacy Regulations in Order to Prepare,” The Legal Forum on Statewide Privacy Compliance, February 4, 2020.

Read More