Catherine Travers is a Solicitor with Mullen Coughlin UK (MC UK), practicing primarily in the Incident Response practice area. Based in London, she works closely with the MC UK team and her counterparts in the United States to respond to, and investigate, data privacy and security incidents on behalf of organizations across all industry group sectors, with a particular focus on the Retail/E-Commerce, Financial Services, Professional Services and Technology industry sectors.
As Breach Counsel, and once the incident has been contained oftentimes with the assistance of digital forensics and incident response (DFIR) and other third-party stakeholders, Catherine counsels her clients on their legal and regulatory obligations stemming from the incident. With a keen understanding of the various UK and EU data privacy and security laws and regulations, including the Artificial Intelligence Act (AI Act) and the General Data Protection Regulation (GDPR), she advises clients on required law enforcement reporting, notification and the provision of other post-incident services such as credit/identity monitoring and public relations.
Additionally, Catherine helps her clients strengthen their data privacy and security compliance posture by providing UK- and EU-related Advisory Compliance solutions, such as drafting of Data Processing Agreements (DPAs) and conducting Data Protection Impact Assessments (DPIAs).
Prior to joining Mullen Coughlin, Catherine was the Associate Legal Counsel for a UK-based advertising company. There, she drafted and negotiated commercial agreements that included data privacy provisions related to data sharing, data enrichment and SaaS.
Catherine also gained valuable data protection experience at a large international law firm. There, she worked primarily on data- and technology-focused transactions.
Earlier in her career, Catherine was part of the Global Privacy team at a leading consumer goods company where she assisted in implementing its GDPR compliance program. In this role, she was responsible for drafting privacy policies, responding to data subject access requests and managing commercial contracts.