David Alfred

Practice Areas

David is Director and Co-Head of Data Protection, Privacy and Cybersecurity at Drew & Napier and a member of the firm’s Artificial Intelligence (AI) and Digital Trust practice. He is also Co-Head and Programme Director of the Drew Data Protection & Cybersecurity Academy.

David is a senior technology lawyer with over 25 years’ experience encompassing legal, public policy, business and technological aspects of the digital economy, data, digital technology, telecommunications and the Internet. He has particular expertise in data law and policy, digital and cyber regulation, data protection and cybersecurity.

David has spoken widely on global aspects of data governance, privacy and cybersecurity, development of data protection law in Southeast Asia, data protection management and compliance, AI regulation, digital trust and other technology and business-related topics. He has taught courses up to postgraduate level at local tertiary institutions and is a qualified corporate trainer and adult educator.

Prior to joining the firm, David was the first Chief Counsel to Singapore’s Personal Data Protection Commission (from 2013 to 2020). He has also worked with Singapore’s Info-communications Media Development Authority and its predecessor, the Info-communications Development Authority of Singapore.

Professional Memberships

- Honorary Secretary, Digital Trust Chapter, SGTech

- Adjunct Associate Professor, Faculty of Law, National University of Singapore-

- Member, Singapore Academy of Law

- Member, Law Society of Singapore

- Member, Law Society of England, and Wales

- Member, International Association of Privacy Professionals

- Member, Adult Education Network

Publications

- David N. Alfred & Lanx Goh, Cross-border Issues in Data Protection (Chapter) in Data Protection Law in Singapore, 2nd ed. (Singapore Academy of Law, 2018)

- David N. Alfred and Janice Lee, Individual Rights under the Amended Personal Data Protection Act: Balancing Individual Control and Organisational Accountability [2021] PDP Digest 205

-David N. Alfred, Development of Singapore Data Protection Law: International Influences and Local Needs [2017] PDP Digest 241Chambers Global Practice Guide: Cybersecurity 2023 (Singapore chapter)

- Regulatory Developments in AI, Decentralised Technologies, Data Protection and Cybersecurity in the Asia-Pacific in World Legal Summit (WLS) Special Edition e-zine (co-author 2020)

- Chambers Global Practice Guide: Cybersecurity 2021 – 2024 (Singapore chapter)

- International Comparative Legal Guide: Cybersecurity 2021 – 2024 (Singapore chapter)

Experience

David has extensive experience advising and acting for government, commercial and not-for-profit organisations in diverse sectors (for example, telecommunications, information technology, media, e-commerce, banking, insurance, healthcare, retail, hospitality, and manufacturing).

Some of the matters David has advised on include the following:

- Public policy and development of data protection laws in Singapore and Brunei Darussalam, including conduct of public consultations, stakeholder engagement and competency development

- Numerous enforcement cases under Singapore’s Personal Data Protection Act 2012 (PDPA)

- Cybersecurity incident and data breach management and response

- Cybersecurity reviews and audits for a wide range of systems and applications

- Cross-border transfers of personal data, data transfer agreements and transfer impact assessments

Education