Continuing Education Information Sheet

• Explain the core requirements and history of the CCPA
• Identify the new rights and responsibilities added by the CPRA
• Describe the role and enforcement authority of the California Privacy Protection Agency (CPPA)
• Anticipate emerging state privacy developments and adapt client practices

Intended audience: Attorneys advising clients subject to the CCPA and the growing patchwork of state data privacy laws.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Jeewon Serrato, Partner and Head of the Global Consumer Protection Team, Pillsbury Winthrop Shaw Pittman LLP

  BakerHostetler

  Jeewon Kim Serrato is a partner at Pillsbury Winthrop Shaw Pittman LLP in San Francisco, where she heads the firm's global consumer protection team and co-leads its retail industry team. She counsels clients on consumer privacy, cybersecurity, data optimization and data science, and advises on regulatory defense, investigations, data monetization strategies and technology transactions. She joined Pillsbury in March 2024 from BakerHostetler, where she co-led U.S. consumer privacy and the digital transformation and data economy team, and has served as chief privacy officer for a publicly traded Fortune 100 financial services company. She helped found the California Lawyers Association's Privacy Law Section and served as inaugural chair of its executive committee. At Legal Cyber Academy, Jeewon Serrato teaches on the California Consumer Privacy Act.

• Shannon Yavorsky, Partner, Orrick, Herrington & Sutcliffe LLP

  Orrick, Herrington & Sutcliffe LLP

  Shannon Yavorsky is a partner at Orrick, Herrington & Sutcliffe LLP in San Francisco and London, where she co-leads the firm's global Cyber, Privacy & Data Innovation group and its artificial intelligence practice. She advises on U.S. and European privacy, cybersecurity and AI issues, counselling clients on cross-border data transfers, data breaches and the development of global privacy and AI compliance programs, evaluating privacy, security and AI risk in corporate transactions, and drafting and negotiating data-related contracts. She joined Venable's San Francisco office as a partner in 2017 from Kirkland & Ellis, where she was also a partner. She is admitted to practice in California, Ireland, and England and Wales. At Legal Cyber Academy she teaches on the CCPA, the GDPR and board cyber readiness.

• Krysta Pachman, Partner, Susman Godfrey L.L.P.

  Susman Godfrey LLP

  Krysta Kauble Pachman is a partner in the Los Angeles office of Susman Godfrey L.L.P., where she tries complex commercial cases for both plaintiffs and defendants, with class action work spanning privacy, securities, copyright and antitrust alongside patent, trademark and copyright disputes. U.S. District Judge J. Michelle Childs appointed her co-lead counsel in the Blackbaud data breach class action, which involves allegations of negligence, invasion of privacy, breach of contract, and violations of the California Consumer Privacy Act and other state statutes. Pachman clerked for the Honorable Philip S. Gutierrez of the U.S. District Court for the Central District of California and holds a J.D. from UCLA School of Law. At Legal Cyber Academy, Krysta Pachman teaches on the CCPA.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.2 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.