David has represented dozens of companies across industries in connection with civil litigation and pre-suit demands related to a wide-array of privacy-related litigation.  Whether related to website tracking technologies, fall out from a data breach, or claims of unfair and deceptive trade practices, David has experience successfully resolving litigation matters for clients.

David has worked with a number of state attorney general’s offices and federal regulators, and advocated on behalf of clients in the ad tech, telecommunications, healthcare, and financial services sectors whether in response to routine inquiries or in response to reported data incidents. His work also includes collaborating with clients to provide testimony and comment on existing and planned data privacy legislation at the state and federal levels.

David has experience in all aspects of privacy program implementation from conducting risk assessments and drafting privacy policies to planning around cross-border data transfers, and negotiating vendor agreements. He regularly counsels on GDPR, GLBA, CCPA, TCPA, CAN-SPAM, and the growing list of state law privacy laws and regulations, including engaging with key rule-makers at the state level to advance clients’ interests. David also regularly performs due diligence for corporate transactions.

David maintains an active pro bono practice, having represented inmates in various actions in state and federal courts, and providing privacy program development, counseling and training to non-profits.

Show Less

• Represented wide array of companies in state Attorney General investigations related to compliance with state comprehensive privacy laws
• Represented health-related companies in investigations by the FTC and OCR associated with their data security and compliance programs.
• Represented companies in consumer class actions brought pursuant to the Illinois Biometric Information Privacy Act
• Represented technology, healthcare and clients across a broad spectrum in multinational data incident response
• Counseled major energy companies with respect to its CCPA readiness and general privacy compliance programs
• Counseled a major telecommunications company with respect to its CCPA and state law privacy compliance programs
• Worked with a major university on its GDPR compliance programs
• Counseled medical technology companies on the cross-border transfer of personal data around the globe
• Worked with clients in the healthcare, life sciences, food and alcohol, human resources, and telecom arenas develop privacy and compliance programs
• Conducted privacy and cyber due diligence for private equity companies in their acquisition and sales of data analytic, medical research, healthcare and media companies
• Represented startup drone delivery service in development of its HIPAA and privacy programs

Show Less