David Simon

About David Simon

David Simon is co-head of Skadden’s global Cybersecurity and Data Privacy Practice and a member of the firm’s National Security Group. He has deep experience working closely with boards, executive teams, product teams and security teams to develop holistic and pragmatic strategies for navigating rapidly evolving U.S. and European legal, regulatory, compliance and policy issues involving cybersecurity, AI and privacy. Formerly a Pentagon special counsel and chief cyber counsel to the U.S. Cyberspace Solarium Commission, with experience practicing EU law in Brussels. Mr. Simon regularly assists clients as the lead investigator and crisis manager for high-stakes, cross-border incidents involving cyberattacks, data breaches, extortion, AI and regulatory defense.Mr. Simon has dealt with some of the most significant cyber incidents on an international scale. His experience includes advising victims of state-sponsored cyber activity, ransomware and other cyber extortion attacks, as well as breaches of health information, sensitive government information, intellectual property and personal data. Dual qualified to practice in the U.S. and the EU, he often represents global companies in connection with cyber incident preparedness and response investigations requiring analysis of breach reporting obligations under U.S. and EU law, including the EU GDPR, NIS2, DORA and the Cyber Resilience Act, and investigations by European data protection authorities and national cyber authorities. He has counseled companies on major cyber incidents and incident preparedness across virtually every industry, including financial, health care, energy, chemical, defense and aerospace, telecommunications, food, transportation, online retail and hospitality.With years of experience working in data protection privacy compliance, Mr. Simon regularly advises global tech companies in regulatory defense and cross-border investigations involving GDPR, DORA and NIS2. He often helps clients manage conflicts between rapidly evolving U.S. and European regulatory regimes. He counsels clients on data governance and privacy compliance with HIPAA, ECPA, CCPA/CPRA, EU GDPR and a range of EU laws governing data protection and technology supply chain risk management.Mr. Simon is widely known for his experience regarding the legal and policy issues at the intersection of cybersecurity, privacy, AI and national security.In certain jurisdictions, this may be considered attorney advertising.

Experience

1. Adjunct Fellow in Cybersecurity and International Law, Technology Policy Program

   Center for Strategic and International Studies (CSIS)

   Jan 2017 — Present · Washington, DC, US

Education

• Harvard Law School

  JD

• University of Oxford

  MPhil, International Relations

• University of Minnesota

  BA, Russian Area Studies, Political Science, Global Studies