David leads Smith Anderson’s Data Privacy and Security practice, advising technology companies and healthcare providers on complex privacy and data security matters. His expertise spans compliance with HIPAA, FERPA, CCPA, GDPR, PIPL, and other state, federal, and international laws.

Certified as a CIPP/US and CHPC®, David brings both legal and business perspective, having previously served as Interim Associate Compliance Officer and Director of Privacy at a North Carolina academic medical center. He regularly counsels clients on breach investigations, compliance programs, contract negotiations, and privacy training infrastructure, while also drawing on his experience in business litigation in state and federal courts.