David Stauss founded Stauss PLLC to provide practical, risk-based, understandable advice on the most difficult issues in privacy, AI, and cybersecurity. Prior to founding Stauss PLLC, David Stauss was an equity partner at AmLaw 100 law firms and headed the privacy and cybersecurity practice at a major US law firm. He is Chambers ranked and an IAPP Emeritus Fellow. For nearly a decade, David has served as an outside subject matter expert to state lawmakers across the country on privacy, AI, and data breach laws.

David advises clients on existing and emerging state, federal, and international privacy, AI, and information laws and associated regulations. He works with clients throughout their life cycle, helping them understand and comply with rapidly evolving requirements, leading comprehensive responses to cybersecurity incidents, and playing a key role in transactions. 

For years, David has counseled clients on comprehensive U.S. state privacy laws, such as the California Consumer Privacy Act, children’s privacy and social media laws, data broker laws, biometric and health information privacy laws, AI laws and regulations, and international laws, such as the European Union’s General Data Protection Regulation.

David is a prolific writer and speaker on privacy and cybersecurity issues. In 2022, he was named JD Supra’s Reader’s Choice top author in data privacy and has since continued to rank among the top. He is a published author and frequently quoted in the press, including the Wall Street Journal, Bloomberg Law, The Hill, U.S. News & World Report, CBS News, Cybersecurity Law Report, Law360, Security Magazine, Data Guidance, The Privacy Advisor by IAPP, and Corporate Counsel.

Education

• Rutgers Law School, J.D., with highest honors, editor-in-chief, Rutgers Law Journal
• American University, B.A., cum laude, Golden Key National Honor Society; president, Alpha Lambda Delta National Honor Society

Awards

• Chambers and Partners
  • Global Guide, USA, Privacy & Data Security: Privacy, 2024-2026
  • USA Nationwide, Privacy & Data Security: Privacy, 2024-2026
  • USA Nationwide, Privacy & Data Security, 2023
• IAPP
  • Emeritus Fellow, 2026
  • Fellow of Information Privacy
  • Certified Information Privacy Professional / United States
  • Certified Information Privacy Professional / European Union
  • Certified Information Privacy Technologist
• 5280 Magazine, Denver Top Lawyer, Communications/Technology, 2025
• JD Supra Readers’ Choice Awards
• Top Author: Cybersecurity and Data Collection & Use, 2019; Cybersecurity, 2021; #1 Author: Data Privacy, 2022-2023; Data Privacy, 2024-2026; Artificial Intelligence, 2026
• The Legal 500 United States
  • Media, technology and telecoms: Cyber law (including data privacy and data protection), Recommended lawyer, 2025
• Thomson Reuters Stand-Out Lawyer, 2023-2026
• ColoradoBIZ Magazine, “Top 25 Most Influential Young Professional” 2018

Media and Publications

• Quoted, “California Bills on Sensitive Data, CIPA Reform and AL Chatbots Near Passage,” Privacy Daily, July 31, 2026.
• Quoted, “Data Brokers Deny a Million Pleas to Delete Personal Information,” Bloomberg Law, July 31, 2026.
• Quoted, “New Jersey’s Highest-in-Nation Data Broker Fees Shock Industry,” Bloomberg Law, July 10, 2026.
• Quoted, “New privacy laws target data brokers as scrutiny of industry grows,” Pluribus News, July 10, 2026.
• Quoted, “AI-Powered Inferred Data Poses New Threats for Consumer Privacy,” Bloomberg Law, July 6, 2026.
• “Independence Day surprise: New Jersey’s costly new data broker law,” IAPP, July 2, 2026.
• Quoted, “More States Aim to Rein in, Track Broker Sales of Personal Data,” Bloomberg Law, June 25, 2026.
• Quoted, “Amendments Move Colorado AI Act’s Focus From Risk to Transparency,” IAPP, May 13, 2026.
• Quoted, “N.Y. Lawmakers Pass Chatbot Disclosure Requirement,” Pluribus News, March 13, 2026.
• Quoted, “Protecting Geolocation Data Emerges as State Privacy Priority,” Bloomberg Law, February 13, 2026.
• Quoted, “Revised Privacy Laws Cast Wider Net for Corporate Compliance,” Bloomberg Law, December 30, 2025.
• “Retrospective: 2025 in state data privacy law,” IAPP, November 10, 2025.
• Quoted, “Companies Turn to State-Specific Responses to Kids’ Privacy Laws,” Bloomberg Law, October 1, 2025.
• Quoted, “California Bills Near Passage: Universal Opt-Outs, Location Privacy and AI,” Privacy Daily, August 15, 2025.
• Quoted, “Colorado Special Session to Consider Amendments to Landmark AI Law,” CPI, August 14, 2025.
• Quoted, “Colorado AI Act Faces Potential Changes in Special Legislative Session,” IAPP, August 13, 2025.
• “Retrospective: 2024 in state sectoral privacy law and AI law,” IAPP, October 17, 2024.
• “2024 in US state privacy law: A retrospective with Keir Lamont and David Stauss,” IAPP, October 1, 2024.
• “The year that was in state data privacy,” IAPP, October 20, 2023.
• “State data privacy legislation: Takeaways from 2022 and what to expect in 2023,” IAPP, August 23, 2022.
• “Analyzing the CPRA’s new contractual requirements for transfers of personal information,” IAPP, March 23, 2021.
• “Analyzing the Calif. attorney general’s comments on cookies and tracking technologies,” IAPP, June 22, 2020.

Recent Speaking Engagements

• Speaker, Overview of Colorado ADMT Law, Future of Privacy Forum, May 2026
• Chair, US State Privacy Workshop, IAPP Global Privacy Summit, 2026
• Chair, US State Privacy Workshop, IAPP PSR, 2025
• Chair, US State Privacy Workshop, IAPP Global Privacy Summit, 2025
• Chair, US State Privacy Workshop, IAPP PSR, September 2024
• Chair, US State Privacy Workshop, IAPP Global Privacy Summit, 2024