Overview
John (He/Him) knows that good data practices mean a competitive advantage. He also knows how difficult it can be for businesses to understand and manage the complex laws that govern how they use and protect their data.
John brings to the firm over two decades of legal experience in the public and private sectors. Notably, he held a variety of positions with the federal government, where his work largely focused on high-profile privacy, cybersecurity, and technology issues.
During his time working for the U.S. Congress, he managed many high-profile hearings and investigations and served as a senior legal advisor to committee chairs in the House and the Senate. In these roles, he supervised the drafting of dozens of bills related to information technology, cybersecurity, privacy, telecommunications, and consumer protection, many of which were eventually adopted into law.
As chief privacy official of the Federal Communications Commission, John supervised the agency’s compliance with all applicable information security and privacy laws. He prepared the agency’s annual privacy impact assessment and worked closely with the agency’s chief information officer and other senior leaders to make sure that good data practices were part of the agency’s decision making.
John eventually moved to a product and privacy counsel job at a financial technology startup, where he worked with teams across the company to make informed decisions about how to use and secure personal information in its products. He was responsible for the company’s public-facing disclosures and helped the company navigate the sometimes-tricky cybersecurity and privacy issues that arise during audits and contract negotiations.
At Amundsen Davis, the depth and breadth of John’s experience in cybersecurity and data privacy allows him to advise companies of all sizes on sound data privacy practices. In doing so, he knows he is helping his clients distinguish themselves by building trust with their employees, business partners, and consumers.
Membership & Involvement
Member: International Association of Privacy Professionals (IAPP); Federal Communications Bar Association (FCBA)
Resources & Insights
Alerts
Speaking Engagements
Published Works
Blog Posts
Education on Demand
Join Amundsen Davis Partners Joe Heino and John Williams as they discuss the intellectual property and privacy risks businesses should understand and share practical strategies for reducing exposure.
Join partners Molly Arranz and John Williams for a practical Corporate Risk Management Series session on how to identify and manage AI-related risks across your organization and third-party relationships.
As businesses increasingly rely on third-party vendors and new technologies like AI, data privacy and cybersecurity risks continue to evolve. Poor data hygiene, careless AI use, and weak vendor oversight can open the door to regulatory scrutiny, reputational damage, and costly data breaches. By understanding areas of vulnerability, companies can minimize their exposure.
As businesses increasingly rely on third-party vendors and new technologies like AI, data privacy and cybersecurity risks continue to evolve. Poor data hygiene, careless AI use, and weak vendor oversight can open the door to regulatory scrutiny, reputational damage, and costly data breaches. By understanding areas of vulnerability, companies can minimize their exposure.
Join Amundsen Davis’s Cybersecurity & Data Privacy Service Group attorneys Molly Arranz, practice group chair, and John Williams, partner, for a timely Cybersecurity Awareness Month discussion on how to keep your organization safe.
Firm News
- Emerging AI Risks in Business Operations: A Practical Compliance Walkthrough
Emerging AI Risks in Business Operations: A Practical Compliance WalkthroughAI tools really are changing the way people are working, but they are also creating new security and compliance risks for companies adopting the tools. This session will review the obvious, and sometimes less obvious, risks of using AI tools in your business operations.
- The Future of EU-U.S. Data Transfers and GDPR Adequacy After Trump v. Slaughter
The Future of EU-U.S. Data Transfers and GDPR Adequacy After Trump v. SlaughterComplying with European privacy rules governing the transfer of personal information to the U.S. has always been challenging for U.S. companies. Now, a seemingly unrelated U.S. Supreme Court decision, Trump v. Slaughter, may create new uncertainty around the legal framework governing those transfers, raising fresh considerations for companies that do business in Europe.
- Corporate Risk Management Series: Website Risk Management- Intellectual Property & Privacy Pitfalls Every Company Should Understand
Corporate Risk Management Series: Website Risk Management- Intellectual Property & Privacy Pitfalls Every Company Should UnderstandJoin Amundsen Davis Partners Joe Heino and John Williams as they discuss the intellectual property and privacy risks businesses should understand and share practical strategies for reducing exposure.
- AI and Your Duties to Inform and Disclose: Building a Defensible Disclosure Strategy for Trucking Operations
AI and Your Duties to Inform and Disclose: Building a Defensible Disclosure Strategy for Trucking OperationsWe’re excited to highlight Lew Bricker, Molly Arranz, and John Williams as featured speakers at the upcoming ATA Litigation Center’s Trucking Legal Forum in their session, “AI and Your Duties to Inform and Disclose: Building a Defensible Disclosure Strategy for Trucking Operations.”
Services
Education
Georgetown University Law Center, J.D.
University of Chicago, PhD
Diploma in Archivistica Paleografia Latina e Diplomatica
University of Chicago, M.A.
University of Virginia, B.A.
Certified Privacy Professional
(CIPP/G, CIPP/US, CIPP/E)
Admissions
- Maryland
- Washington, D.C.
Languages
- Italian
- Spanish




