Brett Randles is an Associate with Mullen Coughlin UK (MC UK), practicing primarily in the Incident Response practice group. Based in London, Brett is an experienced Breach Counsel attorney who has led and managed hundreds of data privacy and security incidents on behalf of organizations across all industry sectors and geographic locations.
As Breach Counsel, Brett works closely with the MC UK team and his counterparts in the United States in overseeing and advising with respect to various incident response processes including the digital forensic investigation; public relations and communications regarding the incident; data mining; ransom negotiation and payment; and notification/regulatory obligations stemming from the incident. Specifically, Brett supports local and foreign organizations with UK/EU General Data Protection Regulation (GDPR) compliance and other cross-border data protection issues with multi-jurisdictional impacts, as well as provides counsel and advice to clients navigating data privacy and security incidents where the Payment Card Industry Data Security Standard (PCI DSS) applies.
In addition to his Incident Response practice, Brett also advises organizations on domestic and international regulatory issues including notification obligations as well regulatory investigations including enforcement notices, reprimands and monetary penalties. He also provides risk management and other advisory compliance services to his clients, including facilitating trainings and presentations regarding incident preparedness, legal and regulatory developments and compliance.
Brett is a qualified legal practitioner in South Africa and practiced as an admitted attorney of the North Gauteng High Court of South Africa prior to becoming a Legal Trainee for a globally-recognized law firm in San Francisco, CA where he assisted on a number of high-profile and complex data breaches and investigations.
Prior to joining MC UK, Brett was a legal professional on the Cyber and Data Risk team of a well-known and international law firm, specializing in data privacy and security incident response and insurance coverage advice relating to cyber insurance policies. Brett also has significant cyber claims experience having previously completed a legal secondment with a global cyber insurance carrier handling cyber and data protection claims within the London Insurance Market (Lloyd’s). He uses this experience when liaising with cyber insurance claims professionals during the course of an incident response and investigation.