Nancy Kang

Legal Director – ZwillGen Law LLP

Office: San Francisco, CA

Email me


Nancy Kang’s practice centers around global privacy and data protection issues, including in relation to the GDPR and ePrivacy rules, as well as emerging privacy laws in countries around the globe. She assists companies with an international footprint in a wide range of industries with their privacy and data protection issues, including those relating to mobile applications, online advertising and marketing, tracking technologies, internet-connected devices, artificial intelligence, and immersive technologies.

Nancy works with clients to develop both global and tailored regional strategies to manage privacy requirements and regulatory risk worldwide. She regularly counsels companies on the interplay between existing and emerging laws, including new state laws in the U.S., the GDPR and ePrivacy rules, and continually evolving standards in Europe, the Asia-Pacific, Latin America, the Middle East, and Africa.

Leveraging her extensive experience with global privacy counseling across various platforms, including mobile apps, websites, and internet-connected devices, Nancy regularly advises clients on product launches and has reviewed and prepared hundreds of privacy impact assessments for new product features. She especially enjoys assisting businesses with developing practical, risk-based strategies, and adapting business models and products to evolving privacy laws in a scalable and sustainable way.

Nancy guides clients through all aspects of privacy compliance and program management, including analysis of obligations under privacy laws, developing user interfaces and disclosures, conducting privacy assessments, developing policies and procedures for consumers and enterprise customers, drafting data processing agreements and related data provisions, developing processes for data subject requests, and conducting training for internal stakeholders. She also advises on the privacy and data processing aspects of vendor due diligence and corporate acquisitions, including post-acquisition integration.

Prior to joining ZwillGen, Nancy worked for Uber leading the company’s privacy counseling for numerous core areas, including digital advertising and marketing, payments and identity risk, freight, and IT engineering. She also previously led privacy compliance counseling for the Western entities of a multinational video game company and served as the senior privacy counsel for a global cloud-based data warehousing company.

Prior to practicing law, Nancy was an entrepreneur, and her customers included professionals from large multinational corporations. Her own experience managing a startup gives her an especially pragmatic perspective in her advice for startup clients. She also brings policy and local government experience as a former policy analyst for the Mayor of the City of Los Angeles.

Nancy’s services are offered to clients through ZwillGen Law LLP, an affiliate of ZwillGen PLLC.



New York University School of Law, J.D., 2008

University of California, Berkeley, BA, 2001







IAPP, Certified Information Privacy Professional – Europe (CIPP/E)

IAPP, Certified Information Privacy Professional – US (CIPP/US)



New York