Covington & Burling LLP operates as a limited liability partnership worldwide, with the practice in England and Wales conducted by an affiliated
limited liability multinational partnership, Covington & Burling LLP, which is formed under the laws of the State of Delaware in the United States
and authorized and regulated by the Solicitors Regulation Authority with registration number 77071..
Andrew Smith advises clients on retail financial services, data protection, advertising and consumer protection, technology, credit reporting, and e-commerce issues. He assists banks, non-bank lenders, technology companies, and their vendors with regulatory compliance, litigation, and transactional matters.
Prior to re-joining the firm, Andrew served as Director of the Bureau of Consumer Protection at the Federal Trade Commission (FTC), where he was focused on investigations and enforcement of privacy, data security, financial services, and marketing laws and regulations across a broad range of areas, including fair lending, technology platforms, digital advertising, payments, telemarketing, lead generation, affiliate marketing, consumer reporting, and small business financing. He also oversaw the Bureau’s extensive rulemaking and workshop proceedings, including on endorsement guides, security of financial data, subscription marketing, contact lenses, and children’s privacy. Additionally, he led the FTC’s COVID-19 pandemic-related enforcement and consumer education efforts. In a previous role as Assistant to the Director of the Bureau of Consumer Protection at the FTC, Andrew led a team of professionals to develop and draft ten rules and six studies under the Fair Credit Reporting Act.
Andrew represents clients before federal and state agencies—particularly the FTC and Consumer Financial Protection Bureau (CFPB)—in law enforcement and rulemaking proceedings. He regularly advises companies on the requirements of the GLBA, FCRA, DPPA, ECOA, FDCPA, TCPA and TSR, FTC Act, Dodd-Frank Act, and analogous state laws, including state insurance privacy laws and security breach notification requirements.
Back
