WRAL News Talks with David Senter on Data Privacy in the Face of New State Laws  

In a recent WRAL News article, David Senter, chair of the Data Privacy and Security practice group, discussed the critical importance of proactively managing data privacy and security in today’s rapidly changing regulatory environment. With eight new state privacy laws taking effect in 2025 alone, bringing the total to 16, businesses are grappling with a patchwork of regulations across states and industries.

David emphasized that even without a comprehensive federal privacy law in the U.S., each industry typically has industry-specific data privacy regulations or other guidance to regulate a company’s collection, use and protection of the data it collects, such as HIPAA for healthcare data and FTC guidance for consumer data.

"Many businesses don’t fully understand the risks associated with how they use personal data," David explained. "New laws are being passed frequently, and a lot of businesses are playing catch-up to understand the regulations that apply to the data they collect." He also stressed the potential consequences of data mishandling, including regulatory investigations and enforcement actions, class action lawsuits and significant reputational damage, not to mention the harm suffered by affected individuals through identity theft or other data misuse.

Smith Anderson’s data privacy team works with clients both proactively and reactively, helping businesses understand what data they collect, how it’s used, and what legal requirements apply. The firm also assists with incident response planning, including conducting cybersecurity tabletop exercises and risk assessments to prepare for potential breaches.

“The increased regulatory scrutiny around personal data requires businesses to take a fresh look at their data privacy and security practices,” David said. He also noted that planning ahead and conducting regular risk assessments can make a significant difference when responding to an incident.

Smith Anderson remains committed to helping businesses stay compliant and protect their data. Read the full article on WRAL News to learn more about how companies can prioritize data privacy and security.