David Rice

Representative Experience

• Privacy and Security Compliance Plus

  • Lead outside counsel advising clients on international, federal, and state privacy and security laws, including the California Consumer Privacy Act, California Privacy Rights Act, General Data Protection Regulation, Virginia Consumer Data Protection Act, Health Insurance Portability and Accountability Act, Gramm-Leach-Bliley Act, Family Educational Rights and Privacy Act, Telephone Consumer Protection Act, FTC Red Flags Rule and Computer Fraud and Abuse Act.

  • Advised clients involved in internet technology, networking, social media, app development, communications, sports and entertainment, gaming, health care, manufacturing, education, cannabis, and government regarding data processing.

  • Advised clients regarding buying and selling personal information, marketing and sales strategies, analytics, AI, privacy policies, supply chain privacy and security risks, privacy program maturity, data mapping, online sales and mobile marketing, data privacy and security due diligence in M&A transactions, and TCPA compliance programs.

  • Advised clients regarding data subject access requests and handled responses and related disputes.

  • Drafted privacy policies and assisted clients with related implementation issues.

  • Developed privacy program for social media platform, including strategies regarding content moderation and data monetization.

  • Advised state port authority on its information security and incident response program.

  • Performed a data security audit for an educational institution, which uncovered data processing issues, and advised the institution on best practices and compliance.

  • Trained legal and IT staff at major utilities and a government transportation entity regarding data security.

  • Represented global internet company in implementing responses to Edward Snowden leaks regarding government monitoring of internet traffic.

• Privacy Transactions, Cloud Computing, Networking, Data Centers, and Database Transactions Plus

  • Negotiated data-related agreements, including data processing agreements, licensing agreements, and SaaS agreements.

  • Handled GDPR and CCPA vendor agreement updates for numerous clients.

  • Advised one of the largest global internet companies regarding domestic and international data centers, internet backbone and content delivery networks, and related data security implications. Advised in-house legal, engineers, and other corporate channels.

  • Negotiated the sale of a major data center for a Fortune 500 company.

  • Managed a team of ten attorneys and a paralegal in handling data-related technology transactions.

  • Negotiated a wide range of intellectual property related contracts, including software development agreements, end user licensing agreements, and trademark licensing agreements.

• Incident Response Plus

  • Lead outside counsel on numerous data security incident responses, which involved handling global reporting obligations to consumers, regulators, and data protection authorities, and working with law enforcement and forensic IT vendors.

  • Lead outside counsel responding to wire transfer fraud incidents, including working with law enforcement such as the US Secret Service, forensic IT vendors, and negotiations with affected counterparties.

  • Represented multiple nonprofit entities whose data was compromised by a widely-reported ransomware attack.

  • Assisted a global manufacturing and marketing company on a data breach that included access to social security numbers and other sensitive employee data.

  • Managed response to security breach of a nonprofit resulting in unauthorized access to sensitive information, resulting in fraudulent tax returns; handled press release and consumer notices.