Carolyn Purwin Ryan

426 W. Lancaster Avenue, Suite 200
Devon, PA 19333

Office: (267) 930-6836


Villanova University
School of Law, Masters of Law in Taxation, 2009

Villanova University School of Law, Juris Doctor, 2007

Georgetown University, Bachelor of Science in Health Studies, 2002


  • Pennsylvania
  • New Jersey
  • Eastern District of Pennsylvania
  • Middle District of Pennsylvania
  • Western District of Pennsylvania
  • District Court of New Jersey
  • US Tax Court

Practice Areas

Carolyn Purwin Ryan is a partner at Mullen Coughlin. She serves as breach counsel and provides third-party privacy defense legal services. She also aids clients in incident response planning, including tabletop exercises, assessment of regulatory compliance requirements and inquiries from regulators on both the state and federal levels. Ms. Ryan serves as a breach counsel to companies in various areas including healthcare institutions, construction companies, managed service providers, municipalities, professional services, retail, technology and financial institutions. She leads response investigations, guidance in governmental investigations, mitigation and restoration services. Ms. Ryan counsels clients on development of risk assessment policies, vendor agreement analysis and implementation of data privacy practices.

Prior to joining Mullen Coughlin, LLC, Ms. Ryan was the co-chair of the Cybersecurity and Data Privacy department at her previous firm. She also served as national counsel for several state and federal mass tort litigations representing manufacturers and distributors of pharmaceuticals, medical publishers, morcellators and various surgical devices. She previously clerked for the Honorable Joseph Rosa in the Superior Court of New Jersey and Honorable Richard Berman in the United State Court, Southern District of New York.



    • Program Co-chair of the ABA/TIPS Cybersecurity and Data Privacy Committee
    • Pennsylvania Super Lawyer Rising Star in 2018 and 2019
    • American Bar Association
    • Pennsylvania Bar Association
    • Defense Research Institute
    • American Health Lawyers Association



      • “International Claims Management”, NetDiligence Conference, November 2020

      • “Ryuk, Maze, Sodinokibi, Conti…OH MY!”, Advisen, October 21, 2020

      • “Cybersecurity Tabletop”, Crittenden Medical Conference, October 2020

      • “Recent Cyber Updates”, Chubb Claims Review, June 2020

      • “Preparing, Responding and Recovering from a Cyber Incident”, The Knowledge Group, March 2020

      • “Understanding Cyber Risks and Ransomware”, Construction Financial Management Association, November 2019

      • “Anti-Hacking and Privacy Laws for Businesses: Rights and Remedies”, Knowledge Group, June 2019

      • “Electronic Discovery and Data Breaches”, NetDiligence, Junto News, August 27, 2019

      • “Cybersecurity Tabletop Exercise”, AICC Box Summit, August 2019

      • “Law Firms: Are They the Next Industry to Become a Cyber Breach Target?”, USI Affinity, 2018

      • “Cybersecurity Best Practices”, Dispute Resolution Institute, 2018

      • “Fighting the Cyber War: How to Protect Yourself and the Companies you Represent”, PA I Day, August 2018

      • “Cybersecurity: To Cloud or Not to Cloud”, USI Affinity, August 2018

      • “Claims: Cyber Intruders Target Insurance Legal Community”, AM Best, August 2018

      • “Cost of a Data Breach”, NetDiligence Conference, 2018

      • “Top Ten Practice Pointers for Dealing with Electronic Discovery”, HB Litigation, 2017