Donald DePass helps clients tackle challenging state, federal, and international privacy and data security issues. He advises on compliance with the Health Insurance Portability and Accountability Act (HIPAA), state health-privacy laws, the Federal Trade Commission (FTC) Act, and the Family Educational Rights and Privacy Act (FERPA), among other privacy and data security laws and regulations.

Donald regularly counsels clients on incident response, including breach notification obligations as well as response to government investigations and enforcement actions in the wake of large-scale cyberattacks. He also helps clients develop and implement compliance programs and draft contractual language for safeguarding sensitive information and legitimizing cross-border data transfers.

Donald counsels clients facing dynamic regulatory environments in a wide range of industries, primarily in the technology, life sciences and health care, and education sectors. In addition to assisting clients with complex legal matters, Donald helps clients resolve complicated policy issues affecting data privacy and security. In a rapidly evolving marketplace, he provides practical solutions that help clients meet legal and policy challenges and retain consumer trust.

While in law school, Donald served as a student attorney in the Georgetown Social Enterprise & Nonprofit Clinic and was a member of The Tax Lawyer.