Troutman Pepper Locke Adds Privacy and Cybersecurity Ace David Stauss as Partner

PHILADELPHIA – David Stauss has joined Troutman Pepper Locke as a partner in the firm’s Privacy and Cyber Practice Group. A distinguished authority in privacy, information security, and AI law, Stauss brings extensive experience in state data privacy legislation, artificial intelligence regulation, and cybersecurity matters. Stauss’ addition furthers the firm’s unique ability to holistically assess and advise on privacy, security, and AI risk simultaneously from an advisory, legislative, and regulatory enforcement and litigation defense perspective. This is a key market differentiator and a value proposition that few firms can match.

Stauss joins Troutman Pepper Locke from Husch Blackwell, where he co-led the privacy and cybersecurity practice. He counsels clients on tracking and complying with existing privacy laws and emerging privacy, AI and information security legislation, including the Colorado AI Act, comprehensive U.S. state privacy laws, such as the California Consumer Privacy Act, children’s privacy and social media laws, data broker, biometric and health information privacy laws, and international laws, such as the European Union’s General Data Protection Regulation. Stauss is also prominent amongst state privacy and AI regulators and defends companies in regulatory investigations and enforcement actions. His contacts with regulators and vast experience with U.S. privacy and AI laws set him apart and represent a truly unique and unmatched skill set in the U.S.

“David is an outstanding addition to our privacy and cyber practice. His unique set of skills and experience enhance the firm’s 360-degree solution offering to effectively address data privacy and cyber issues, particularly as it pertains to state privacy laws, enforcement, and AI counseling,” said Ronald Raether, leader of Troutman Pepper Locke’s Privacy and Cyber Practice Group. “He has an impressive reputation and considerable experience with state privacy and AI laws and regulations. When combined with our existing team of litigators, compliance advisors and regulatory enforcement capabilities, our clients are better positioned to adopt rapidly changing technology and proactively identify and address evolving legal challenges.”

Throughout his career, Stauss has been at the forefront of tracking, analyzing, and developing privacy and cybersecurity legislation. In 2018, he assisted in drafting Colorado’s data breach and information security legislation, serving as the outside subject matter expert for the Colorado Attorney General’s office. In 2022 and 2023, Stauss was a member of the work groups for the Connecticut Data Privacy Act and children’s privacy law amendments, serving as an outside authority for the bill’s sponsors. In 2024, he was a member of the multi-state work group on artificial intelligence regulation.

“An influential name in the privacy law sector, David’s involvement in drafting and passing key state privacy laws, will push Troutman Pepper Locke to the forefront of firms in this space,” added James Koenig, co-lead of the firm’s privacy and cyber team. “His arrival will complement our prominent State AG, FTC, and Regulatory Investigations, Strategy and Enforcement practices, and highlights the firm’s continued commitment to strategically growing the Privacy and Cyber Practice Group. His hire comes on the heels of our recent addition of another industry-leading privacy attorney David Navetta, further amplifying the firm’s national presence as a leader in the data privacy, cybersecurity, and AI sectors.”

Stauss is a prolific writer and recognized thought leader on privacy and cybersecurity, frequently authoring and speaking on these issues. In addition to being selected as JD Supra’s top author in data privacy in 2022, he has cultivated a significant following and regularly contributes to an array of blogs, podcasts, and webcast series. His insights have been featured in major publications like the Wall Street Journal, Bloomberg Law, The Hill, CBS News, and Law360, among others. At Troutman Pepper Locke, Stauss contributes to the firm’s newly launched Privacy + Cyber + AI blog, providing readers with informed perspectives on evolving data privacy legislation.

“David’s national reputation, combined with our Chambers-ranked State Attorneys General team with over 20 years of experience, presents clients with a unique blend of nationally recognized data privacy and state attorneys general capabilities. Companies have recognized that this combined skill set is essential for effectively responding to privacy issues advanced by regulatory agencies, including state attorneys general. This combination creates a market differentiation that few firms can offer,” added Ashley Taylor, co-leader of Troutman Pepper Locke’s nationally ranked State Attorneys General Practice, vice chair of the firm, and partner in the Regulatory Investigations, Strategy and Enforcement Practice Group.

Stauss is designated as a Privacy Law Specialist (PLS) by IAPP. The PLS designation verifies that he has met the IAPP and American Bar Association’s rigorous experience and knowledge requirements and distinguished himself as a leader in the privacy law industry. Stauss is certified as a Fellow of Information Privacy by the IAPP, a designation signifying comprehensive knowledge of privacy and data protection laws. He has also been credentialed by the IAPP as a Certified Information Privacy Professional in the laws of the U.S. and European Union, and as a Certified Information Privacy Technologist. Stauss is recognized for his privacy law practice by several leading industry authorities, including Chambers USA, Chambers Global, and Legal 500, among others.

“Joining Troutman Pepper Locke offers me an incredible opportunity to build on the firm’s strong platform and stellar reputation for delivering top-notch service,” said Stauss. “I look forward to expanding the firm’s distinctive brand, and I’m eager to contribute to its growth as an elite player in the privacy, security, and AI markets.”

For decades, Troutman Pepper Locke has represented leading global, as well as emerging, technology and life sciences companies. The team, recognized by Chambers USA, Chambers Global, and The Legal 500 as one of the top privacy practices in the U.S., includes privacy and cybersecurity thought leaders and pioneers in emerging issues relating to implementation and compliance, litigation, regulatory investigations, and incident response. Troutman Pepper Locke’s experience leading some of the most high-profile litigation matters and regulatory enforcement actions uniquely positions the firm to address emerging privacy and cyber issues that the world — and the law — have never had to confront before.

The firm’s Privacy and Cyber team extends the range of privacy and cyber services traditionally offered by law firms, drawing upon its unique combination of global knowledge and experience in key areas such as privacy program creation and implementation, licensing, financing and M&A transactions, incident response, litigation, and regulatory investigations and enforcement. This comprehensive 360-degree approach helps the firm provide holistic and innovative solutions to clients’ most complex privacy and cybersecurity challenges.

Troutman Pepper Locke

Troutman Pepper Locke helps clients solve complex legal challenges and achieve their business goals in an ever-changing global economy. With more than 1,600 attorneys in 30+ offices, the firm serves clients in all major industry sectors, with particular depth in energy, financial services, health care and life sciences, insurance and reinsurance, private equity, and real estate. Learn more at troutman.com.