Andrew Gallup is an Associate in Mullen Coughlin’s Incident Response practice group. He provides Breach Counsel services to organizations who have been victimized by a data privacy and security incident such as a ransomware attack, business email compromise, inadvertent disclosure or other unauthorized network intrusion. He coordinates the investigation by ensuring that, oftentimes with the assistance of a third-party forensic investigation firm, the incident is contained and any technical evidence is preserved. Working hand-in-hand with other internal and external incident response parties, Andrew works to identify any legal, regulatory or contractual obligations the organization may have as a result of the incident, and then effectuates those obligations, including notification, as necessary. On behalf of his clients, he also responds to state, federal and industry-related regulatory inquiries stemming from the incident.

Prior to joining Mullen Coughlin, Andrew worked for the U.S. Department of Justice’s (DOJ) Office of Legal Policy conducting legal and policy research related to emerging technologies and related Executive Orders. Andrew also served as a Judicial Intern/Extern at the U.S. Court of Federal Claims and in the U.S. District Court for the District of Columbia.

Andrew received his J.D. from American University Washington College of Law, where he also acted as a Note & Comment Editor for the International Law Review. He holds a B.A. magna cum laude in International Relations from Loyola Marymount University.

Andrew is licensed to practice in the District of Columbia.