Joseph A. Gawlowicz

411 Theodore Fremd, Suite 206S
Rye, NY 10580

Office: (267) 930-4797


University at Buffalo School of Law
Juris Doctor, 2006, cum laude

Rochester Insitute of Technology
Master of Science, Information Technology, 2003

Rochester Insitute of Technology
Bachelor of Fine Arts, Applied Photography, 1997


  • New York
  • U.S. District Court for the Western District of New York
  • U.S. Court of Appeals for the Second Circuit

Practice Areas

Professional Memberships

  • American Bar Association (ABA), Member
  • American Mensa, Member
  • American Society of Legal Engineers, Member
  • Monroe County Bar Association, Member
  • New York State Bar Association (NYSBA), Member

Joseph Gawlowicz is an Associate in Mullen Coughlin’s Incident Response practice area. He assists organization of all sizes and across all industry sectors who have been victimized by a data privacy and security incident by serving as their “Breach Coach” and coordinating the response and investigation into the incident with the various incident response stakeholders.

After an organization experiences a data privacy and security incident, such as a ransomware attack, business email compromise or other network intrusion, Joseph works quickly to identify the nature and scope of incident so that valuable third-party vendors can be brought in to mitigate the incident and begin restoring operations. As part of his investigation, he liaises directly with various incident response stakeholders such as cyber insurance carrier and brokers, forensic investigation and/or data mining firms, law enforcement, state and federal regulatory bodies and other business partners.

Using information gleaned from the incident response and investigation, Joseph counsels victim organizations on their legal, regulatory and contractual obligations stemming from the incident. This includes determining what U.S. and/or international data privacy laws are triggered and if any notification or law enforcement and regulatory body reporting is required. He then, oftentimes in conjunction with third-party partners, effectuates these notices in a timely and compliant manner.

After spending over 12 years as a labor and employment (L&E) attorney, Joseph became a cybersecurity instructor for a full-time, hybrid cybersecurity engineering bootcamp. There, he taught a diverse group of individual learners and Fortune 500 enterprise-wide teams a curriculum of content related to cybersecurity such as governance, risk & compliance; threat intelligence; and network, system and application security, as well as realistic enterprise-wide data privacy and security incident scenarios. He uses this technical knowledge when collaborating with digital forensic and incident response vendors as part of his practice.

Joseph gained valuable data privacy experience as an L&E attorney, including investigating inadvertent disclosures of sensitive and confidential information, as well as drafting appropriate notification letters after real or suspected incidents.

Joseph served in the United States Navy as a photojournalist from 1985-1993. As a service member, he received multiple awards related to his actions during various tours of duty including in Somalia and Kuwait.

Joseph is also a member of American Mensa, the largest national Mensa operating under Mensa International, Ltd.


  • “The Future of the Legal Profession: The Changing Role of Technology, Education and Economics,” Roberts Wesleyan College, March 13, 2012