Devin Forbush, CIPP/US, practices in Mullen Coughlin’s Incident Response practice group as an Associate attorney. He serves as Breach Counsel for organizations suffering from a data privacy and security incident, such as unauthorized network intrusions, inadvertent disclosures and ransomware attacks, among others. In the course of counseling his clients through the response and investigation into the incident, Devin works closely with its internal stakeholders, as well as third-party incident response vendors, to first mitigate the incident on the organizations operations and then to identify any legal obligations stemming from the incident. He then assists in the effectuation of said obligations, such as client, employee, business partner and media notification, as well as with law enforcement reporting and regulatory agency follow-up.
Devin was a Law Clerk with Mullen Coughlin prior to his admission to the Maine Bar. As a Law Clerk, he delved deeply into data privacy and security incident response, analyzing matter data to provide insights on which laws and regulations were deemed to be relevant to the specific incident. He also assisted in the drafting of legal memos and analysis in response to federal and industry-related regulatory investigation and follow-up.
Prior to joining Mullen Coughlin, and while a J.D. candidate at University of Maine Law School, Devin demonstrated an ongoing commitment to the information privacy and data protection field. Devin served on the first editorial board for the Student Journal of Information Privacy Law, acting as the Managing Monthly Editor. Accompanying this experience, Devin was a Data Security and Privacy Extern for Tyler Technologies – a software company for the public sector. As an Extern, he was exposed to numerous aspects of in-house legal work relevant to data privacy and information security. He provided support with conducting risk assessments, managing data subject requests and contract drafting on data privacy and protection provisions.
Devin also was an Extern with the International Association of Privacy Professionals (IAPP), focusing on novel privacy issues and providing general legal support for IAPP’s General Counsel and Chief Legal Officer.
Moreover, while at University of Maine Law, Devin competed in two international data protection moot courts: “The Data Protection Moot Court” hosted by the University of Vienna in 2022 and “The Helsinki Information Law Moot Court” in 2024, wherein Devin and his team won “Best Memorandum” on novel GDPR issues related to generative artificial intelligence.
Lastly, Devin served as a Student Attorney at the Cumberland Legal Aid Clinic, providing legal services to low-income individuals and families in Southern Maine on a variety of civil, criminal, family and juvenile matters. He was also selected as the 2022 “Bernstein Fellow,” while a Summer Law Clerk for Hon. Tammy Ham-Thompson in the Lewiston District Court.
PUBLICATIONS
- “Examining Netchoice and Murthy: Content Moderation in the Hands of the Supreme Court,” University of Maine Student Journal of Information Privacy Law, June 7, 2024
- “Protecting the Biometric Data of Minor Students,” University of Maine Student Journal of Information Privacy Law, February 27, 2024
- “Privacy in Virtual and Augmented Reality,” University of Maine Student Journal of Information Privacy Law, October 25, 2023