Clementine Wilkie is an Associate in Mullen Coughlin’s international Incident Response practice group, based in the London office. Leveraging her international experience, Clementine is well-versed in the cybersecurity landscape across several jurisdictions and she is a trusted legal advisor who supports organizations with their strategic investigation and response to complex and global data privacy and security incidents. With experience acting as Breach Counsel on various types of incidents including ransomware attacks; funds-transfer-fraud (FTF); business email compromises (BECs); third-party and vendor breaches; and multi-party data breaches, Clementine equips organizations with strategic and tailored legal advice while helping to limit their risk exposure and potential reputational and financial impact.

Across the lifecycle of a data privacy and security incident, Clementine leads the coordination of workstreams including engaging forensic and communications’ vendors; navigating legal, contractual and regulatory reporting obligations; and managing said notification campaigns. She also assists organizations with their response to regulatory investigations, aiming to minimize any potential enforcement action stemming from the incident.

Prior to joining Mullen Coughlin, Clementine practiced in a large global law firm based in Australia. She brings to Mullen Coughlin a wealth of knowledge regarding the UK and Australian data privacy landscape.

REPRESENTATIVE MATTERS

Incident Response

• Advised a UK architecture firm impacted by a ransomware incident on its notification obligations to the UK’s Information Commissioner’s Office (ICO) and other global regulators in Australia, Sweden and the United States
• Assisted an IT managed service provider (MSP) coordinate its multi-party data breach assessment and notification obligations to 140 impacted customers whilst ensuring limited reputational harm and mitigating risk exposure
• Assisted a national pathology provider respond to a regulatory investigation brought by an Australian regulator for alleged violations of Australian data protection law
• Advised a healthcare provider on its liability exposure arising from a global multi-party FTF incident, successfully seeking contribution from an involved third-party and coordinating the criminal authority response

Litigation

• Represented a university in successfully obtaining a court-ordered injunction against a threat actor to prevent the misuse of stolen data and mitigate the flow-on effects
• Advised multiple clients on technology-related disputes including third party IT liability claims, pursuing recovery actions as a result of FTF and subsequent litigation