David Stauss, a highly respected privacy law attorney, has joined Troutman Pepper Locke as a partner in the firm’s Privacy and Cyber Practice Group. This addition strengthens the firm’s capabilities in navigating the complex and rapidly evolving fields of data privacy, cybersecurity, and artificial intelligence (AI) regulation.
Background and Expertise
Stauss brings a wealth of experience from his previous role at Husch Blackwell, where he co-led the privacy and cybersecurity practice for over six years. Certified as CIPP/E, CIPP/US, CIPT, and FIP, he is a distinguished authority in privacy, information security, and AI law. His expertise spans advising clients on compliance with emerging privacy laws, including the Colorado AI Act, comprehensive U.S. state privacy laws like the California Consumer Privacy Act (CCPA), children’s privacy and social media laws, data broker regulations, biometric and health information privacy laws, and international frameworks such as the European Union’s General Data Protection Regulation (GDPR).
Stauss is particularly noted for his prominence among state privacy and AI regulators. He frequently defends companies in regulatory investigations and enforcement actions, leveraging his extensive contacts and deep understanding of U.S. privacy and AI laws to provide unmatched legal insights. His involvement in legislative processes is noteworthy; in 2022 and 2023, he served as a member of work groups for the Connecticut Data Privacy Act and amendments to children’s privacy laws, acting as an outside authority for the bill’s sponsors. In 2024, he participated in a multi-state work group on artificial intelligence regulation.
As a prolific writer and thought leader, Stauss was recognized as JD Supra’s top author in data privacy in 2022. He regularly contributes to blogs, podcasts, and webcast series, with his insights featured in prominent publications such as the Wall Street Journal, Bloomberg Law, The Hill, CBS News, and Law360. At Troutman Pepper Locke, he will contribute to the firm’s newly launched Privacy + Cyber + AI blog, offering timely perspectives on evolving data privacy legislation.
Leadership Perspectives on the Hire
The announcement, dated July 30, 2025, highlights the strategic importance of Stauss’s addition to the firm. Ronald Raether, CIPP/US, leader of Troutman Pepper Locke’s Privacy and Cyber Practice Group, praised Stauss, stating, “David is an outstanding addition to our privacy and cyber practice. His unique set of skills and experience enhance the firm’s 360-degree solution offering to effectively address data privacy and cyber issues, particularly as it pertains to state privacy laws, enforcement, and AI counseling.”
James Koenig, co-lead of the firm’s privacy and cyber team, added, “An influential name in the privacy law sector, David’s involvement in drafting and passing key state privacy laws will push Troutman Pepper Locke to the forefront of firms in this space. His arrival will complement our prominent State AG, FTC, and Regulatory Investigations, Strategy and Enforcement practices, and highlights the firm’s continued commitment to strategically growing the Privacy and Cyber Practice Group. His hire comes on the heels of our recent addition of another industry-leading privacy attorney David Navetta, further amplifying the firm’s national presence as a leader in the data privacy, cybersecurity, and AI sectors.”
Ashley Taylor, vice chair of the firm, emphasized the market differentiation: “David’s national reputation, combined with our Chambers-ranked State Attorneys General team with over 20 years of experience, presents clients with a unique blend of nationally recognized data privacy and state attorneys general capabilities. Companies have recognized that this combined skill set is essential for effectively responding to privacy issues advanced by regulatory agencies, including state attorneys general. This combination creates a market differentiation that few firms can offer.”
Impact on the Firm and Clients
Stauss’s joining enhances Troutman Pepper Locke’s ability to provide holistic advice on privacy, security, and AI risks from multiple perspectives, including advisory, legislative, regulatory enforcement, and litigation defense. The firm’s Privacy and Cyber team is known for its comprehensive approach, extending beyond traditional services to include privacy program creation, incident response, litigation, and regulatory investigations. This move positions the firm as a leader in addressing the challenges posed by an ever-changing global economy, particularly in sectors like financial services, health care, and technology.
Privacy Security Risk Speakers
Looking ahead, Stauss is set to host a U.S. state privacy workshop at the International Association of Privacy Professionals (IAPP)’s Privacy. Security. Risk. 2025 conference, underscoring his continued influence in the field.
David Stauss’s transition to Troutman Pepper Locke marks a pivotal enhancement to the firm’s privacy and cyber capabilities, promising innovative solutions for clients grappling with the intricacies of data privacy and AI regulation. As privacy laws continue to evolve, experts like Stauss play a crucial role in guiding organizations toward compliance and risk mitigation.
