Johanna Skrzypczyk (pronounced “Scrip-zik”) is a counsel in the Data Strategy and Security practice of Debevoise & Plimpton LLP. Her practice focuses on advising AI matters and privacy-oriented work, particularly related to the California Consumer Privacy Act. Ms. Skrzypczyk is recommended by The Legal 500 US (2024) for Cyber Law (data privacy and protection).

Prior to joining Debevoise, Ms. Skrzypczyk served as Assistant Attorney General in the Bureau of Internet and Technology at the New York Attorney General’s Office. In this role, she helped draft the amendments to New York’s data breach law (known as the SHIELD Act), investigated, litigated, and negotiated the landmark settlement of an action against a national corporation regarding credential stuffing, one of the very few regulatory actions to address this widespread type of cyberattack, and co-led an initiative involving potential discriminatory impacts of AI. Ms. Skrzypczyk also worked on matters involving consumer privacy, data security and virtual markets.

Ms. Skrzypczyk graduated magna cum laude from Boston College in 2006 and received her J.D. from Columbia Law School in 2010, where she was named a Stone Scholar. Ms. Skrzypczyk is admitted to the bars of New York and Massachusetts.