
Justine is a partner at law firm Baker & McKenzie LLP based in San Diego, California. She focuses her practice on both proactive and reactive cybersecurity and data protection services, representing multinational clients in matters related to incident preparedness and response, compliance with global cyber laws, privileged cyber investigations and gap assessments, data governance, data and cyber litigation.
She provides actionable and practical guidance to help businesses manage data, technology, cyber threats, privacy, security and digital assets. As businesses navigate complex and far-reaching laws and regulations, Justine proactively creates compliance programs customized to client needs and budgets, including data mapping, vendor management, privacy and security by design, cyber risk management and mitigation, workforce policies, data retention and destruction policies and implementation, consumer request workflows, cyber-awareness policies and trainings, and CCPA/CPRA readiness audits.
Justine is nationally recognized for her thought leadership and role in providing reactive cyber services, including incident response, crisis management, privileged forensic investigations into business email compromises, data breaches and ransomware attacks, compliance with notice obligations to individuals and regulators, regulatory inquiries and investigations, and cyber litigation. Justine also handles employment litigation and counseling, as well as commercial litigation.
Justine is co-author of "Data Privacy Program Guide: How to Build a Privacy Program that Inspires Trust," CISO DRG Publishing, 2022, and frequently speaks and writes on privacy, cyber and AII issues.
Sessions in which Justine Phillips participates
Monday 12 May, 2025
This panel will explore the new era of data governance, emphasising the importance of building simplified programs that inspire trust. It will take a holistic approach to data, privacy, cybersecurity, and artificial intelligence, incorporating global laws, regulations, and emerging trends. The discussion will highlight the secular nature of global laws, data sovereignty, restrictions on data transfers, and data minimization.