Photo, Helena J. Engfeldt

Helena J. Engfeldt

Baker & McKenzie LLP


Helena Engfeldt helps companies around the world expand their businesses internationally especially by taking privacy law compliance global. She focuses on counseling companies on data privacy and protection regulations as they apply to products, business models, and employers. She is licensed to practice law in California, New York and Washington. She regularly writes and speaks about privacy law and was shortlisted for privacy & data protection lawyer of the year in the Americas in 2023 and 2024.

Practice Focus

Helena advises private and public companies on international expansion, cross-border transactions, and development and use of new products and services. Her clients include artificial intelligence developers and users, e-commerce companies, builders, healthcare and wellness companies, content developers, and telecommunications providers. She regularly counsels clients on compliance with data protection regulations around the world such as CCPA, CMIA, COPPA, GDPR, HIPAA, MHMDA, and PIPL.

Representative Legal Matters

  • Advised 300+ companies in various industries with global privacy law compliance including the California Consumer Privacy Act (CCPA), the Washington My Health My Data Act, the General Data Protection Regulation (GDPR), and the ePrivacy Directive.
  • Advise companies on compliance with privacy laws meant to protect children, including the U.S. federal Children’s Online Privacy Protection Act and the California Student Online Personal Information Protection Act.
  • Assist companies with designing, documenting, and scaling their global data privacy compliance program.
  • Advise on data security incidents and responses including in the context of consumer, employee, and health data ranging from company identified vulnerabilities to ransomware and supply chain attacks.
  • Advise on employee monitoring technologies and processes including in connection with hybrid working arrangements.
  • Advise companies on setting up and operationalizing global whistleblower hotlines including in compliance with the EU whistleblower directive.
  • Negotiate commercial and data processing and transfer agreements in various industries and contexts.
  • Advise companies on global anti-spam law compliance.

Professional Honors

  • Shortlisted for Privacy & Data Protection Lawyer of the Year, Women in Business Law Americas Award, 2023, 2024

Professional Associations and Memberships

  • Certified in U.S. and European privacy law (CIPP/US and CIPP/E) by the International Association of Privacy Professionals


  • Washington~United States (2023)
  • California~United States (2012)
  • New York~United States (2012)


  • University of California, Berkeley School of Law (J.S.D. with Law and Technology Certificate) (2013)
  • University of California, Berkeley School of Law (LL.M.) (2009)
  • Uppsala University (Juris Kandidat) (2008)


  • English
  • Swedish
  • Co-author, “Can processors use data to train AI, improve products while remaining a processor?,” International Association of Privacy Professionals, 3 July 2024
  • Speaker, Practising Law Institute’s Twenty-Fifth Annual Institute on Privacy and Cybersecurity Law, EU and UK Privacy Law Developments: New Directions and New Challenges, 3 June 2024
  • Speaker, North America Quarterly Privacy Webinar on US state privacy laws, 29 May 2024
  • Co-author, "Amendments to California’s CMIA Bring Health Data New Requirements," 24 May 2024
  • Speaker, AdTech, Cookies, Wiretapping, and Banners: The impact of changing laws and changing technology on the world of cookies (2024 Edition), 23 May 2024
  • Speaker, Leveraging User Data to Train AI and Improve Products, California Privacy Law Series, 9 May 2024