David has represented dozens of companies across industries in connection with civil litigation and pre-suit demands related to a wide-array of privacy-related litigation. Whether related to website tracking technologies, fall out from a data breach, or claims of unfair and deceptive trade practices, David has experience successfully resolving litigation matters for clients.

David has worked with a number of state attorney general’s offices and federal regulators, and advocated on behalf of clients in the AdTech, telecommunications, healthcare, and financial services sectors whether in response to routine inquiries or in response to reported data incidents. His work also includes collaborating with clients to provide testimony and comment on existing and planned data privacy legislation at the state and federal levels.

David has experience in all aspects of privacy program implementation, from conducting risk assessments and drafting privacy policies to planning around cross-border data transfers and negotiating vendor agreements. He regularly counsels on GDPR, GLBA, CCPA, TCPA, CAN-SPAM, and the growing list of state privacy laws and regulations, including engaging with key rule-makers at the state level to advance clients’ interests. David also regularly performs due diligence for corporate transactions.

David maintains an active pro bono practice, having represented inmates in various actions in state and federal courts, and providing privacy program development, counseling, and training to nonprofits.

Show Less

• Represented a wide array of companies in state attorney general investigations related to compliance with state comprehensive privacy laws
• Represented health-related companies in investigations by the FTC and the US Department of Health and Human Services Office for Civil Rights associated with their data security and compliance programs
• Represented companies in consumer class actions brought pursuant to the Illinois Biometric Information Privacy Act
• Represented clients in technology, healthcare, and across a broad spectrum in a multinational data incident response
• Counseled major energy companies with respect to their CCPA readiness and general privacy compliance programs
• Counseled a major telecommunications company with respect to its CCPA and state law privacy compliance programs
• Worked with a major university on its GDPR compliance programs
• Counseled medical technology companies on the cross-border transfer of personal data around the globe
• Worked with clients in the healthcare, life sciences, food and alcohol, human resources, and telecommunications arenas to develop privacy and compliance programs
• Conducted privacy and cybersecurity due diligence for private equity companies in their acquisition and sales of data analytic, medical research, healthcare, and media companies
• Represented a startup drone delivery service in the development of its HIPAA and privacy programs

Show Less

Courts/Agencies
US Court of Appeals for the Seventh Circuit
US District Court for the Northern District of Illinois
US District Court for the Northern District of Illinois – Trial Bar

Show Less