David works collaboratively with a diverse range of clients, from small business and pro bono clients to multinational Fortune 100 companies, private equity funds and their portfolio companies. He understands and advises on their data practices to provide guidance on the myriad issues that arise in today’s digital world.

David has experience in all aspects of privacy program implementation from conducting risk assessments and drafting privacy policies to planning around cross-border data transfers, and negotiating vendor agreements. He regularly counsels on GDPR, GLBA, CCPA, TCPA, CAN-SPAM, and the growing list of state law privacy laws and regulations, including engaging with key rule-makers at the state level to advance clients’ interests. David also regularly performs due diligence for corporate transactions. He is also there for his clients in their most difficult times, having navigated data breaches, and successfully resolved both regulatory investigations and class action litigations related to corporate privacy practices.

David has worked with a number of state attorney general’s offices and federal regulators, and advocated on behalf of clients in the telecommunications, consulting and financial services sectors whether in response to routine inquiries or in response to reported data incidents. His work also includes collaborating with clients to provide testimony and comment on existing and planned data privacy legislation at the state and federal levels.

David maintains an active pro bono practice, having represented inmates in various actions in state and federal courts, and providing privacy program development, counseling and training to non-profits.

Show Less

• Represented technology, healthcare and clients across a broad spectrum in multinational data incident response
• Counseled a major energy company with respect to its CCPA readiness and general privacy compliance programs
• Counseled a major telecommunications company with respect to its CCPA and state law privacy compliance programs
• Worked with a major university on its GDPR compliance programs
• Counseled medical technology companies on the cross-border transfer of personal data around the globe
• Worked with clients in the healthcare, life sciences, food and alcohol, human resources, and telecom arenas develop privacy and compliance programs
• Represented genetic research company in its acquisition of medical records company, and helped develop data transfer agreements between corporate entities
• Conducted privacy and cyber due diligence for private equity companies in their acquisition and sales of data analytic, medical research, healthcare and media companies
• Represented startup online education clients develop privacy policies and compliance programs
• Represented startup drone delivery service in development of its HIPAA and privacy programs

*Matter handled prior to joining McDermott.

Show Less