John F. Mullen

John is regarded as an authority on privacy and data security issues by the majority of the largest insurers in the U.S. As a natural outgrowth of his earlier career in medical data computer systems (as well as substantial experience in mass tort), John developed, and continues to help the insurance industry develop, the cyber market. He devotes a significant portion of his practice to evaluating data privacy risks, regulations, responses and resolutions. He manages first- and third-party risks arising in the world of privacy and data security for insureds, brokers, risk managers, underwriters, product specialists and professional claims personnel. John serves as a data breach coach/advisor, providing consultation services to insureds (both pre- and post-breach events) addressing data breach events, including computer forensics, notifications, call centers, public relations, crisis communications, fraud consultation, credit monitoring and identity restoration. In his previous career, John worked in New York City for a leading provider of computer-based data information processing systems and associated services to the healthcare industry in North America and Europe. After reviewing the client's existing data collection and flow, he proposed, sold and helped implement healthcare data processing system solutions that, even then, included cloud computing options. His early interest in healthcare-related technology and data processing was the starting point for his career focus in privacy and data security. An enthusiastic speaker, John is frequently invited by organizations and brokers to discuss risks related to privacy and data security, breaches, cyber liability and network risks. Beyond privacy and data security, John handles a variety of complex, high-value liability issues involving mass/toxic/environmental and pollution-related torts. He has decades of national experience litigating and resolving high-exposure mass tort matters on behalf of insureds and insurers in issues involving food contamination, repetitive stress disorders, isocyanides, metal working fluids, formaldehyde, benzene, mold, pharmaceuticals and others. He is frequently retained in matters where the original/underlying defense counsel is challenged to the point that the insurance company requires outside assistance to reposition the disputes and relative positions of the parties. In such cases, John reorients the cases, the parties and the litigation into a much more favorable position with regard to the insured and the insurer.

• Partner

• Shared Medical Systems, Marketing Rep, 1984 - 1988

• "State of the Cyber Nation Address", 3rd Annual NetDiligence Cyber Risk & Privacy Liability Forum , June 4, 2012 - June 5, 2012
• "Cyber Risk", Insurance Data Management Association (IDMA) 2012 Annual Meeting & Seminar , April 3, 2012
• "Privacy and Data Security Risks Under the Insurance Umbrella", Philadelphia I-Day: Finding Advantage in a World of Change, Panelist, March 22, 2012
• "Network Security and Privacy Panel", Media Financial Management Association (MFM) 2012 CFO Summit , February 22, 2012
• "Cyber Liability The Sequel: One Year Later, What's Changed?", A.M. Best Company Webinar, February 1, 2012
• "The Globalization of Privacy Legislation", Professional Liability Underwriters Society (PLUS) 2011 International Conference, November 3, 2011
• "State of the Cyber Nation Address", NetDiligence West Coast Cyber Risk & Privacy Liability Forum, Panelist, October 4, 2011
• "Assessing and Responding to a Data Breach: From Start to Finish", American Conference Institute (ACI) 5th Annual Advanced Forum on Cyber & Data Risk Insurance, Co-Presenter, September 27, 2011
• "Pharma 101: Understanding the FDA and the Interplay between Drugs, Generic Manufacturers and Mensing", Hot Topics in Insurance Claims: Current Issues Impacting the Industry, Co-Presenter, September 15, 2011
• "Data Security and Cyber Liability Update", HB Litigation & Lexis Nexis, June 15, 2011
• "State of the Cyber Nation Address", 2nd Annual NetDiligence® Cyber Risk & Privacy Liability Forum, June 9, 2011
• "Privacy and Network Risk Exposures, Court Cases, Insurance and More", CPCU Society Webinar, May 26, 2011
• "Data and Network Security (Cyber) Risk Identifying, Assessing and Combating the Exposures", TMPAA Mid-Year Meeting, May 11, 2011
• "A Discussion on Legal and Technology Risk Management & Risk Transfer", Risk and Insurance Management Society (RIMS), Delaware Valley Chapter, Co-Presenter, February 8, 2011
• "What Professionals Should Know About Cyber Liability", A.M. Best Company Webinar, January 27, 2011
• "Data Breach Preparedness - Understanding the Risk and Preparing for the Crisis", In-House Presentation for an International Insurer, January 26, 2011
• “Electronic Media (Cyber) Litigation”, CPCU Society, Philadelphia Chapter, October 19, 2010
• “Data & Network Security (Cyber) Risk- Identifying, Assessing and Combating the Exposures”, CPCU Society Annual Meeting, September 28, 2010
• “Assessing the Impact of Recent Litigation Over Privacy/Security Breaches Current Theories of Liability and Claims”, Cyber and Data Risk Insurance, September 27, 2010
• “Cyber Liability in the Health Care Sector: Best Practices for Risk Management and Identifying Industry- Specific Exposures”, Webinar, July 21, 2010
• “Issues in Risk Management: Privacy and Data Breach Understanding the Risk and Managing a Crisis”, July 20, 2010
• “Risk Management for Data Security and Privacy Exposures”, Webinar, July 15, 2010
• “Network Security and Data Privacy: Past, Present and Future”, July 13, 2010
• “Data Breach Liability: An Unstable Legal Environment”, HB Litigation, The NetDiligence® Cyber Risk & Privacy Liability Forum, June 7, 2010 - June 8, 2010
• “Issues in Risk Management: Privacy & Data Breach - Understanding the Risks and Managing a Crisis”, New York Chapter - RIMS, May 20, 2010
• “Positioning to Win”, In-House Presentation for an International Insurer, May 18, 2010
• “Issues in Risk Transfer: Contractual and Common Law Indemnification”, Webinar, May 18, 2010
• “Network Security and Data Privacy: Past, Present and Future”, In-House Program for an International Insurer, May 5, 2010
• “Data Breach Events: Before and After”, Webinar, May 5, 2010
• “The Risk Managing of Data Security & Breaches in Health Care”, Webinar, March 31, 2010
• “Online Social Networks and Cyber Risk? Here in the Facebook Era the Topic is Looming Large as is the Interface with Policyholders, Carriers and Cyber Risk Coverages”, 2010 ABA/TIPS ICLC Meeting, Co-Presenter, February 25, 2010 - February 27, 2010
• “Network Security/Cyber Law”, Webinar, February 24, 2010
• “Network Security and Privacy 101: An Introduction and Primer on Information Loss”, RIMS Ohio River Valley Chapter, February 19, 2010
• “Data/Cyber Risk: Assessing, Identifying & Combating the Exposures”, NLdH Complex Litigation Seminar, November 5, 2009
• ACI Cyber/Data Risk Insurance Conference, Featured Speaker, Philadelphia, PA, September 16, 2009 - September 17, 2009
• “Cyber Law”, Professional Liability Underwriting Society, August 7, 2009
• “Chinese Drywall Litigation and Insurance Coverage Update”, July 28, 2009
• “Chinese Drywall Litigation”, Lawyer2Lawyer, July 15, 2009
• “Chinese Drywall Litigation”, HB Litigation Conferences, June 2, 2009
• “Preparing for the Inevitable Data Breach” Video Podcast, ACE USA, April 1, 2009
• “Reducing Litigation Risk in a Digital Age”, ACG of Iowa, January 15, 2009
• “Contracts”, Delaware Valley Association of Structural Engineers, October 15, 2008
• “Information and Technology Risk: Challenges for a Connected World”, Gallagher Risk Management Services, June 16, 2008
• “How E-Mail is Raising Your Lawsuit Risk”, National Electrical Contractors Association, May 16, 2008
• “What You Need to Know to Avoid, Prepare For, Afford, Survive and Succeed in a Lawsuit”, Delaware Valley Association of Structural Engineers, April 30, 2008
• “How Electronic Document Management has Revolutionized the Construction Industry and How It will Impact the Future”, General Building Contractors Association, 2008
• “A Practical Guide For Preparing For and Managing a Lawsuit”, National Demolition Association, 2008
• “E-Discovery”, ISOTECH, 2007
• “False Claims and Compliance Issues”, Florida Institute of Construction CPAs, 2007
• “How E-Mail is Raising Your Lawsuit Risk: Reducing Litigation Risk in the Digital Age”, Association of Pennsylvania Contractors, 2007
• “E-Mail Retention in Litigation and Pre-Litigation”, Maryland Highway Contractors, 2007
• “E-Discovery and Document Retention”, Vecellio Group Annual Meeting, 2007

• Pennsylvania, 1991
• New Jersey, 1991

• Federation of Defense & Corporate Counsel, Member
• Defense Research Institute, Member, Steering Committee; Vice Chair, Social Media
• Council on Litigation Management
• Pennsylvania Bar Association (Member)
• New Jersey State Bar Association (Member)
• Philadelphia Bar Association (Member)
• Camden Bar Association (Member)
• Fraternities and Sororities
• Phi Gamma Delta