David N. Alfred

Director, Corporate & Finance

Co-Head, Data Protection, Privacy & Cybersecurity Practice

Co-Head and Programme Director, Drew Data Protection & Cybersecurity Academy

Download CV


  • LLB (Hons), National University of Singapore
  • LLM in Intellectual Property and Technology Law, National University of Singapore
  • MBA, University of Chicago
  • Advocate & Solicitor, Singapore
  • Solicitor, England and Wales (non-practising)
  • Fellow of Information Privacy, International Association of Privacy Professionals
  • Certified Information Privacy Professional / Asia (CIPP/A)
  • Certified Information Privacy Manager (CIPM)
  • Certified Information Privacy Technologist (CIPT)

David is Co-Head of the firm’s Data Protection, Privacy and Cybersecurity Practice and Co-Head of the Drew Data Protection and Cybersecurity Academy.

David is a senior data protection, cybersecurity and technology lawyer with over 20 years’ experience advising on a broad range of matters relating to digital technology, telecommunications and the Internet. He has advised on both regulatory and commercial matters including matters relating to development and review of public policy, legislation, regulatory enforcement, international relations and data governance (amongst others). David is also an accomplished speaker who has spoken widely on the development of Singapore data protection law, data protection and cybersecurity governance and compliance and related issues.

Prior to joining the firm, David was the first Chief Counsel to Singapore’s Personal Data Protection Commission (2013-2020). He has also worked with the Info-communications Development Media Authority and its predecessor, the Info-communications Development Authority of Singapore. 

David’s experience includes a substantial stint as an in-house counsel and he has held General Counsel or equivalent positions for over 10 years. He is familiar with corporate governance, legal risk management and the development and management of the in-house legal function.

David’s experience in data protection and cybersecurity includes advising on numerous cases under Singapore’s Personal Data Protection Act (PDPA) including several which relate to data breaches, information security and protection of personal data. He has also acted as external DPO for various organisations and has advised on various compliance, policy and cross-border issues relating to data protection.

David’s experience with the Drew Data Protection & Cybersecurity Academy includes developing and delivering courses and training programmes on data protection law, management and compliance, including customised programmes and course materials for individual organisations.
Some matters he has advised on include:

  • Data breach / security incident response and management
  • Review of specific cybersecurity measures
  • Development of data protection policies and processes
  • Data Protection Trustmark requirements

The Legal 500 Asia Pacific
TMT 2023 – Recommended Lawyer for 3 consecutive years

Global Data Review – GDR 100
A client praises David Alfred, hailing his ability to “quickly analyse complex issues and provide robust analysis on compliance processes”. – GDR 100 2022

asialaw Leading Lawyers 2023
“Great understanding of the issue and seeks to clarify when information not clear.”

Best Lawyers International: Singapore (2024 edition)
Telecommunications Law - Endorsed Individual

  • Member, Singapore Academy of Law
  • Member, Law Society of Singapore
  • Co-Vice Chairman, Cybersecurity and Data Protection Committee, Law Society of Singapore
  • Member, Law Society of England and Wales
  • Member, International Association of Privacy Professionals
  • Asia Pacific Advisory Board Member, International Association of Privacy Professionals
  • Lim Chong Kin, David N Alfred & Albert Pichlmaier, ICLG – Singapore: Cybersecurity Laws and Regulations 2021
  • David N. Alfred & Lanx Goh, Cross-border Issues in Data Protection (Chapter) in Data Protection Law in Singapore, 2nd ed. (Singapore Academy of Law, 2018)
  • David N. Alfred, Development of Singapore Data Protection Law: International Influences and Local Needs [2017] PDP Digest 241