Kim counsels pharmaceutical and medical device manufacturers, health care providers, and technology and retail companies on regulatory and data privacy issues relevant to digital transformation and innovation, mobile medical apps, health information technology, big data, research collaborations, artificial intelligence, cloud services and connected devices, blockchain, and telemedicine.  She regularly advises clients on matters involving the privacy and security of patient and consumer information under federal, state, and global privacy and information security laws (including HIPAA and state health care privacy laws, GDPR, TCPA, federal and state telemarketing laws, CAN-SPAM, COPPA, and FERPA).

Kim spent a year seconded in the Global Privacy Office of a global pharmaceutical company, where she advised the global privacy and brand teams on various legal matters, including negotiating vendor and data sharing agreements, providing advice on marketing and clinical research initiatives, advising on patient assistance programs, and developing privacy notices, consent documents, and internal policies and procedures.

Kim's practice also involves counseling health care and life sciences companies on regulatory and compliance matters, including structuring transactions, advising on fraud and abuse issues, defending clients in government investigations, and advising on clinical research initiatives.

Kim is a Certified Information Privacy Professional (CIPP/US) through the International Association of Privacy Professionals (IAPP).