Business Counsel · Atlanta, Georgia
Practical legal counsel for companies that handle data, contracts, and customers.
Data privacy and AI governance built on real in-house experience — CCPA/CPRA and the state privacy-law patchwork, AI governance for regulated SaaS, plus contracts and consumer-law compliance from an attorney who litigates these statutes and knows exactly where companies get sued.
Why a consumer litigator is your compliance advantage
We've read the complaints
We know which practices actually trigger FDCPA, TCPA, and FCRA lawsuits, because we file them.
Plain-English deliverables
Policies, playbooks, and contract redlines your team can actually use — not memos that sit in a drawer.
Right-sized for growing companies
Flat-fee and fixed-scope engagements, not open-ended hourly billing. You know the cost before we start.
How we help businesses
Four focused practice lines, each grounded in the same litigation experience that protects consumers.
Data Privacy & Security Compliance
Hands-on CCPA/CPRA program-building — including a compliance program built from the ground up for a multi-brand national company — plus multi-state privacy compliance across 15+ jurisdictions, HIPAA/PHI/PII across vendor and payer relationships, DPAs and BAAs for enterprise SaaS, breach response and regulatory-notification strategy, and MSA, licensing, and SOW negotiation for Fortune 500 pharma and HCP engagements.
AI Governance
Building AI governance and ethical-AI usage frameworks for model training and deployment, product counseling to engineering and product teams on AI features and data collection, alignment with HIPAA and evolving FDA AI guidance, and AI-enabled contract-review workflows with data guardrails.
Contract Review & Drafting
Commercial, SaaS, and vendor agreements, data processing agreements, NDAs, and terms of service — with tracked redlines and plain-English risk summaries.
Consumer-Law Compliance for Businesses
FDCPA, TCPA, and FCRA compliance audits, consent workflows, collection-letter review, furnisher obligations, and litigation-avoidance training. Our deepest expertise.
Additional experience
Beyond privacy and AI, David brings a full general-counsel toolkit to business matters.
- Corporate governance, board matters, and counsel to venture-backed companies
- M&A, financings, and strategic transactions — including an $850M acquisition and a NASDAQ uplisting
- IP strategy — trademarks, trade secrets, and licensing, including protecting proprietary AI models and algorithms
- Litigation and outside-counsel management, including jury trial experience
- Risk management and compliance program design
Business insights
Notes on privacy, AI governance, contracts, and compliance from our business practice.
David A. Prado, Esq.
About the attorney
David A. Prado, founder
David has spent his career on both sides of the data. Before returning to consumer litigation, he served as General Counsel or senior in-house counsel at companies entrusted with some of the most sensitive information people have — children's health records, patient medical data, and the personal data of millions of consumers. He wrote the privacy policies, built the security programs, negotiated the data agreements, and led the breach responses. Today he serves as General Counsel of an AI-powered healthcare SaaS company serving Fortune 500 pharmaceutical and healthcare customers — so the firm's data-privacy and AI-governance counsel comes from work he is doing right now, not just past roles.
The firm serves clients in English and Spanish.
Selected experience
General Counsel, ImpiricusHealth, Corp.
July 2025 – July 2026
As the sole legal officer of an AI-powered healthcare technology company ranked #1 on the Deloitte Technology Fast 500, David built the company's data privacy and cybersecurity program from the ground up for a platform touching more than four billion healthcare data points. He wrote the HIPAA privacy and security policies, negotiated the business associate and data processing agreements governing patient and physician data, ran vendor security risk reviews, and set the guardrails determining how sensitive health information could and could not be used to train artificial intelligence models. He worked daily alongside engineering and security teams, which means he understands how data actually moves through modern companies, not just how the policies say it should.
Associate General Counsel, D4C Dentistry for Children
Oct. 2021 – July 2025
At one of the nation's largest pediatric dental support organizations, with more than 250 clinics across 15 states, David was responsible for data privacy compliance across an operation where protected health information ran through nearly every payer and vendor relationship. The patients were children, which meant the data demanded the highest level of care: he negotiated the HIPAA safeguards, business associate agreements, and vendor data-security terms protecting minors' health records at scale, and built the organization's first digital contract management systems so those protections were tracked and enforced rather than filed and forgotten.
General Counsel, Global Franchise Group, LLC
Sept. 2019 – Oct. 2021
David served as chief legal officer for a portfolio of seven national consumer brands, including Great American Cookies and Round Table Pizza. He built the company's CCPA consumer privacy program and information security policies from scratch, and personally led the response to a consumer data breach, including liability mitigation and customer notification. He remained top legal officer through the company's $850 million acquisition by FAT Brands.
General Counsel, Hollis Cobb Associates, Inc.
Aug. 2014 – 2015
As in-house counsel to a medical receivables company with U.S. and international operations, David advised on compliance under HIPAA, the TCPA, the FCRA, and the FDCPA, the same statutes he now enforces on behalf of consumers.
Administrative Judicial Law Clerk to Chief Judge Michael Malihi
2010 – 2013
David began his career at the Georgia Office of Administrative Hearings, drafting decisions in contested regulatory proceedings involving the Department of Health and Human Services, the Department of Labor, and the Georgia Real Estate Commission.
How an engagement works
1. Tell us what you need
A short intake form or a 20-minute call. We listen first and figure out the real scope before quoting anything.
2. We scope it and quote it
Most work is flat-fee or fixed-scope. You'll know the cost before we start — no open-ended hourly surprises.
3. We deliver
Policies, redlines, or a compliance roadmap, with a follow-up call to walk your team through it.
Frequently asked questions
Schedule a consultation
Tell us a little about your company and what you need. We'll respond within one business day.
(404) 644-6390This page is attorney advertising and provides general information only. It is not legal advice and does not create an attorney-client relationship. Contacting the firm does not make you a client. The Prado Law Firm, LLC is located in Atlanta, Georgia.