Based in London, Alex DiMeo is a qualified U.S. Associate in Mullen Coughlin’s Incident Response practice group. As an organization’s Breach Counsel after a real or suspected data privacy and security incident, he coordinates the multiple incident response stakeholders during the investigation and response into the incident. After the incident has been contained, and using technical evidence provided by third-party digital forensic investigators and data miners, he then counsels the organization on any legal, regulatory or contractual obligations that may stem from the incident. This includes individual, business partner and media notification, as well as law enforcement and other regulatory body reporting. Alex also assists organizations in responding to both formal and informal regulatory investigations and follow-up questions regarding data privacy and security incidents.

Immediately prior to joining Mullen Coughlin, Alex was a secondee at a UK-based, international specialty insurance provider as a Claims Adjuster. There, he gained an appreciation of the insurance claims process and instructed a group of panel law firms, adjusters and other experts to ensure the best outcomes for his clients. This is experience he uses when liaising with cyber insurance carriers and brokers during the incident response process.

Alex is a member of the International Association of Privacy Professionals (IAPP) and is a U.S. Certified Information Privacy Professional (CIPP/US). He is also a member of the Cybersecurity and Data Privacy Committee of the Pennsylvania Bar Association (PBA).

REPRESENTATIVE MATTERS

• Assisted a global medical supplies manufacturer following dual ransomware attacks, coordinating notifications to six (6) European supervisory authorities while managing parallel regulatory obligations across Canada and five (5) LATAM jurisdictions
• Supported a UK‑based safety equipment manufacturer in managing a ransomware incident affecting its U.S. subsidiary, coordinating communications with the FBI and U.S. state regulators and reviewing contractual breach obligations
• Coordinated response for a UK-based defense contractor in reaction to live ransomware attack, with assistance in supporting efforts to encryption event, and communications with both the UK’s Ministry of Defense (UK) and U.S. Department of Defense (DoD)

PUBLICATIONS

• “How Buying Pet Stairs Led to a Class Action Lawsuit Over Wiretapping,” The National Law Review, February 6, 2023
• “Introduction to the Pennsylvania Consumer Data Protection Act,” Pennsylvania Bar Association, April 10, 2022