Carl Anderson

Deputy Legal Adviser @ U.S. Department of State

About

20+ years of experience managing high-stakes legal, political, policy, strategies. Specialties include national security, healthcare, startups, IT and Technology. From the courtroom to the boardroom my expertise includes developing and executing advocacy strategies that span government relations, media relations, and policy communications. Passionate about building cohesive, high-performing, happy teams. I offer deep expertise in cybersecurity, privacy and data protection. I bring that expertise to clients and effectively navigate the myriad of government regulations as well as unique solutions to business challenges. I invest in each clients’ needs one successful outcome at a time.

Country

United States

City

Washington

Industry

Information Technology & Services

Skill

Privacy Policies, Privacy Compliance, Policy Development, Network Security, Law Firms, Data Security, Data Retention, Data Governance, Application Security, Strategic Partnerships, Stakeholder Engagement, Market Planning, Legislative Affairs, Group Activities, Commercial Space, Campaign Execution, Risk Management, Regulatory Requirements, Problem Solving, IP development

Experience

Deputy Legal Adviser

U.S. Department of State

2026-2 - Present · 8 mos

Senior Advisor, Office of the Legal Adviser

U.S. Department of State

2025-4 - 2026-1 · 10 mos

Office of the Legal Adviser

Founder and Managing Partner

Rock Spring Law Group PLLC

2021 - 2025-3 · 4 yrs

Washington, DC

I created an elite data protection firm in Washington, D.C. My goal was to build our reputation by investing in our clients’ needs one successful outcome at a time. Focusing on law and policy, government investigations and regulatory advocacy with an emphasis on data protection and risk management in emerging technologies. Many successful engagements include negotiating a complex privacy agreement between a network of business associates as well as respond to data breaches and security incidents. I first chaired several Federal District Court hearings. I was admitted to the Fourth Circuit Court of Appeals and argued my first appellate case.

Chief Legal Officer and Senior Vice President for Government Affairs

HITRUST

2017 - 2021 · 4 yrs

Responsible for a data protection standard and certification organization’s corporate, external, government, and legal affairs. Manages the Cybersecurity Maturity Model Certification (CMMC), EU General Data Protection Regulation (GDPR) audit and compliance solutions in the U.S and EU. Managed the continuity of operations plans during a global pandemic. Created two international subsidiaries in the E.U. Implemented new anti-trust procedures for the board of directors and corporate officers.

Vice President

Van Scoyoc Associates

2014 - 2017 · 3 yrs

Provided clients with public policy guidance and government relations strategies. Specialized in cybersecurity, communications and information technology, emerging technologies including blockchain and cryptocurrency, government investigations, healthcare and energy policy. Strategic advisor to companies regarding business relationships with the federal government including identifying contract opportunities and connecting clients with government decision-makers. Member of the firm’s crisis management team and co-led a security and privacy working group at the Department of Homeland Security.

Counsel

U.S. House of Representatives, Energy and Commerce Committee

2011 - 2014 · 3 yrs

Led efforts on data protection, cybersecurity, privacy, telecommunications, FCPA, CIFIUS, emerging technologies including blockchain and cryptocurrency, renewable energy policies and investment, federal procurement (FAR), hydraulic fracturing and nuclear materials safety and security.