David Krone Email & Phone Number

Washington, District Of Columbia, United States

Greater New York City Area

Data Security And Privacy. Advise clients on risk assessments, program management, vendor management, due diligence review, policy drafting, technical controls, cross-border data transfers, data subject requests, data processing compliance, and other related items, including with respect to the FTCA, GLBA, HIPAA, COPPA, CAN SPAM, CCPA, CPRA, VCDPA, NYS DFS Cybersecurity Regs, GDPR, Canada PIPEDA, NIST Cybersecurity Framework, ISO Standards, SOC 2, and PCI-DSS.Data Breach Response… Show more Data Security And Privacy. Advise clients on risk assessments, program management, vendor management, due diligence review, policy drafting, technical controls, cross-border data transfers, data subject requests, data processing compliance, and other related items, including with respect to the FTCA, GLBA, HIPAA, COPPA, CAN SPAM, CCPA, CPRA, VCDPA, NYS DFS Cybersecurity Regs, GDPR, Canada PIPEDA, NIST Cybersecurity Framework, ISO Standards, SOC 2, and PCI-DSS.Data Breach Response. Advise clients on responding to data breaches, phishing attacks and other incidents; assessment of legal and regulatory notification requirements, procuring and managing vendors for notification, credit monitoring and call centers. Conduct table top exercises evaluating breach procedures and identifying gaps. Tech, Data, and Outsourcing Transactions. Draft agreements, conduct due diligence, and negotiate on behalf of clients in complex technology and data transactions, including large-scale master service agreements, data protection and/or processing agreements, cloud vendor agreements, technology and business process outsourcing agreements, and data transfers and licenses. Electronic Signatures and Records. Counsel clients on all aspects of implementing electronic transaction, signature, and records programs. Provide counsel on complying with E-SIGN, UETA, NY ESRA, and SBA e-signature regulations; procuring and implementing electronic transaction platforms such as DocuSign, OneSpan, and Adobe Sign; and implementing electronic vault solutions for electronic negotiable instruments/transferable records. Information Governance. Counsel clients on legal, technical and managerial aspects of information governance. Past projects include messaging archive migration (~11 billion messages), implementation of AI for email records auto-classification, implementation of legal holds system, and legacy backup media disposal. Show less

San Francisco Bay Area

Participated in all aspects of a complex international litigation defending the privacy rights of foreign journalists on Facebook. Conducted research on inadequacy of payment card security standards, constitutional challenges to surveillance and the applicability of financial privacy law to online tracking.

Washington D.C. Metro Area

Researched and prepared memoranda analyzing topics such as botnet mitigation, FTC cyber security regulation, FCC broadband regulation and network neutrality in developing countries. Provided legal and technical input for advocacy projects on Bitcoin regulation, cyber security information sharing and security for Internet startups.

Conducted risk assessments, managed annual security audits, performed security incident response, and developed cyber security policies and procedures for several federal agencies. Implemented and maintained forensic and database security tools and compiled agency security reports for U.S. Office of Personnel Management.

Doctor Of Law (Jd)

Honors: Journal of Intellectual Property and Entertainment Law, Senior Articles Editor Activities: Intellectual Property and Entertainment.

M.A., Communications, Culture And Technology

Thesis: Facebook and User-Controlled Privacy: Evaluating Privacy Settings as Notice-and-Consent

B.S.F.S, Science, Technology And International Affairs

Activities: The Hoya (campus newspaper), Editorial Board, Staff Writer

Community Integrated Development, Health Systems