1. Home
  2. People
  3. Chou, James

James Chou

Senior Associate

Washington, D.C.

James Chou assists clients in a wide range of regulatory, compliance, corporate and transactional matters. His transactional work includes mergers and acquisitions, joint ventures, credit facilities and vendor agreements. He draws on his previous career at the Department of Defense to advise clients on cybersecurity, national security, and privacy regulatory compliance matters, including conducting National Institute of Standards and Technology (NIST) assessments and on defense, supply chain, and national security matters. James also helps clients navigate nation-state and cross-border cybersecurity incidents and related investigations and enforcement actions. James also assists technology and fintech companies in proactively managing legal, practical, and regulatory challenges stemming from AI-driven solutions, including advising on compliant solutions for areas such as know-your-customer (KYC), fraud detection, and computer network operations.

Prior to joining Orrick, James was an associate at Buckley LLP. Previously, he spent nearly 10 years as a Defense Analyst and a Senior Operations Research Analyst for the U.S. Army, where he focused on cybersecurity, defense strategy and policy, and program analysis. He also spent more than three years in the defense industrial base as an IT Project Manager and Policy Analyst.

James is a Certified Information Systems Security Professional (CISSP), a Certified Cloud Security Professional (CCSP), and a Certified Data Privacy Solutions Engineer (CDPSE). He is conversational in Mandarin.

  • Representative transactions and regulatory matters include assisting:
    • A national mortgage lender in over $3 billion dollars in warehouse lines of credit across multiple  
    • Multiple NYDFS licensed lenders and money transmitters in examinations and investigations by NYDFS into compliance with its Cybersecurity Regulations, including a global asset management company
    • A technology company in connection with a cyber-related incident involving a nation-state threat actor
    • A major telecommunications company in connection with a ransomware attack
    • A global consumer and professional product manufacturer  
    • A savings bank in a range of regulatory and compliance matters