Rebecca Jones is a Partner at Mullen Coughlin. As a member of the Firm’s Incident Response practice group, she focuses her practice entirely on data privacy and security incident response, assisting organizations across all industry sectors – including healthcare and life sciences, non-profit, retail/e-commerce and education – in the response to, and investigation of, actual and perceived data privacy and security incidents. Rebecca responds quickly by first gathering the necessary facts of the incident and then working with forensic experts, as needed, determining the nature and extent of the incident, all while planning an appropriate and expedient course of action based on: 

• the population of affected individuals; 
• the type and extent of data involved; and
• the applicable state, federal, international and industry-specific laws and regulations. 

Rebecca has handled hundreds of data privacy and security incidents including those stemming from ransomware attacks; business email compromises (BEC); unauthorized access; inadvertent disclosures; Payment Card Industry (PCI) compromises; and other network intrusions. She has extensive experience responding to complex regulatory investigations and inquiries at the state and federal levels including by state Attorneys Generals; state departments of insurance and health; the U.S. Department of Health and Human Services’ Office of Civil Rights (HHS-OCR); the Transportation Security Administration (TSA); and the U.S. Department of Education.  

Rebecca previously served as an Assistant District Attorney in Delaware County, Pennsylvania. In that capacity, she managed a heavy caseload of criminal matters, including complex narcotics and theft cases, and litigated numerous jury and bench trials to successful conclusions. 

Prior to joining the Mullen Coughlin team, she worked in civil litigation for a suburban Philadelphia firm. 

SPEAKING ENGAGEMENTS & PRESENTATIONS

• “State Law and Data File Analysis,” Continuing Legal Education, Wayne, PA, November 28, 2018
• “FERPA with HIPAA and State Law Considerations,” Continuing Legal Education, Wayne, PA, February 7, 2018