Rob Cohn is an Associate in Mullen Coughlin’s Incident Response practice. He provides Breach Counsel legal services to organizations who have, or currently are, suffering through a data privacy and security incidents. He responds to, and investigates, incidents of all sizes and types including large-scale ransomware attacks, business email compromises (BECs), vendor breaches and other unauthorized network intrusions, on behalf of organizations across all industry sectors. Working closely with various other incident response stakeholders, Rob identifies the nature and scope of the incident and counsels his clients on their legal and regulatory obligations, if any, stemming from such incident. This includes, among other things, notification to affected individuals and the media, reporting the incident to law enforcement, procuring credit and identity monitoring services if applicable and responding to inquires regarding the incident from various U.S., international and industry-related regulatory agencies.

Throughout his career, Rob has immersed himself in data protection and information security. He’s gained valuable experience in a variety of data privacy and protection areas including drafting writing information security plans; assisting organizations comply with U.S. privacy regulations; reviewing and negotiating third-party vendor contracts and identifying cybersecurity-related terms and conditions; and authoring compliance memos on U.S. and international data privacy and artificial intelligence laws including with the EU/UK General Data Protection Regulation (GDPR), the EU’s AI Act, the California Consumer Privacy Act (CPPA) and the Colorado Privacy Act (CPA).

Rob received his J.D. from the University of Denver Sturm College of Law and a B.A. from The Ohio State University. While a J.D. candidate, Rob was a member of the Willem C. Vis International Commercial Arbitration Moot competition where he researched and argued issues regarding data breach response protocols under the GDPR, cybersecurity and data governance and international contract law. He is licensed to practice in Colorado and holds a CIPP/E certificate from the International Association of Privacy Professionals (IAPP).