Rebecca Jones is a Partner at Mullen Coughlin in the Advisory Compliance practice group. She focuses her practice entirely on data privacy and information security compliance, assisting organizations across all industry sectors – including healthcare and life sciences, non-profit, retail/e-commerce and education – understand the legal and regulatory frameworks applicable to their organization. She primarily works hand-in-hand with her clients to design and implement tailored data privacy and information security compliance programs relevant to their operations and cyber risk. Rebecca also assists her clients with preparing for data privacy and security incidents and complying with applicable legal and regulatory frameworks by:

• developing risk assessments, incident response plans (IRPs), policies, procedures and training presentations, materials and programs;
• executing and leading Cyber Incident Response Tabletop Exercises, testing their incident response preparedness through a simulated data privacy and security incident; and
• developing other areas of data privacy and information security compliance in the context of third-party contracts and vendor management.

Rebecca has also handled hundreds of data privacy and security incidents as a member of the Firm’s Incident Response practice group, including those stemming from ransomware attacks; business email compromises (BEC); inadvertent disclosures; Payment Card Industry (PCI) compromises; and other unauthorized network intrusions. She has extensive experience responding to complex regulatory investigations and inquiries at the state and federal levels including by state Attorneys Generals; state departments of insurance, health and financial services; the U.S. Department of Health and Human Services’ Office of Civil Rights (HHS-OCR); the Transportation Security Administration (TSA); and the U.S. Department of Education (ED).

Rebecca previously served as an Assistant District Attorney (ADA) in Delaware County, Pennsylvania. In that capacity, she managed a heavy caseload of criminal matters, including complex narcotics and theft cases, and litigated numerous jury and bench trials to successful conclusions.

Prior to joining Mullen Coughlin, she worked in civil litigation for a suburban Philadelphia firm.

SPEAKING ENGAGEMENTS & PRESENTATIONS

• “Data Breach Response,” Texas Reliability Entity Webinar, Virtual, August 26, 2025
• “Post Cyber Breach Assessment: Lessons Learned on Resiliency and Vulnerabilities,” Philadelphia Healthcare Council, Philadelphia, PA, November 19, 2024
• “State Law and Data File Analysis,” Continuing Legal Education, Wayne, PA, November 28, 2018
• “FERPA with HIPAA and State Law Considerations,” Continuing Legal Education, Wayne, PA, February 7, 2018