Kelly Garrison

Junior Partner | Litigation

About

Kelly Garrison assists clients across all industries with pre-incident, incident response and post-incident services following cybercrime and data privacy crises. She advises organizations as to their legal rights and obligations under state laws, federal regulations, as well as contractual and industry specific obligations that may exist following a data incident and the potential exposure of sensitive information, including personally identifiable information (PII) and protected health information (PHI). Kelly’s clients include, but are not limited to, entities in the following sectors: healthcare; education; the Payment Card Industry (PCI); insurance; law, retail; real estate; technology; municipalities; professional services; general business; and government contractors.

  • As a “breach coach,” Kelly provides around the clock support and manages a team of incident response partners, to assist with: securing her client’s environment; conducting a digital forensic investigation to determine the nature and scope of the incident; engaging in cyber-extortion negotiations/communications with the cyber-criminal; restoration and recovery of affected systems; e-discovery/data mining of impacted data for notification purposes; public relations/communications; printing/emailing of notification letters to affected individuals; call-center support; and credit-monitoring and identity restoration services.

    With a response team in place, Kelly assists her clients quickly contain, mitigate and cost-efficiently recover from and respond to data incidents, including ransomware attacks, business email compromises, fraudulent funds transfers, third-party incidents, and other data privacy matters. Kelly further assists clients in communications with law enforcement and third parties during and after an incident.

    Based upon the evidence available, Kelly evaluates her clients’ notification obligations to individuals and regulators and counsels her clients though each step of the process. Kelly also assists her clients in responding to federal, state and other regulatory investigations and third-party claims that may arise following cybersecurity and data privacy incidents.

    Pierson Ferdinand’s 24/7/365 Cyber/Data Incident Hotline can be reached at: 833-PF-SHHH (833-737-7444); cyber@pierferd.com

    As Pierson Ferdinand’s first Junior Partner, Kelly’s extensive background includes nearly a decade as a paralegal prior to beginning her path as an attorney. Kelly worked on a wide range of civil matters, including labor and employment law, personal injury, products liability, reinsurance matters, class action litigation, intellectual property matters, sports law/contract disputes and assisted on the general counsel team to a national sports organization. Kelly attended countless mediations, arbitrations and provided support at federal trials across the US. With her comprehensive background, Kelly is able to appreciate and understand her client’s needs and draw on her comprehensive knowledge to timely resolve matters with positive results. Prior to shifting her focus to incident response, Kelly also advised insurers as to obligations under their policies and endorsements with respect to coverage following cybersecurity and data privacy incidents.


Practices

  • Cyber-Risk, Privacy, and Data Security

  • Insurance

  • Technology

  • White Collar Defense & Investigations

  • Civil Pretrial and Trial Services

  • Litigation and Risk Management

  • Government and Government Affairs

Admissions

  • New York


Education

  • Elizabeth Haub School of Law at Pace University, J.D., 2020

  • Purchase College, State University of New York (SUNY), B.A., Legal Studies, 2012, Cum Laude

Experience

  • FisherBroyles, LLP

  • Wilson Elser Moskowitz Edelman & Dicker, LLP

Presentations

  • Privacy and Cyber Law Key Issues and Implementations, Pace University/Virtual NY CLE, 2023

  • Ransomware Trends and Response, Intouch Live Annual NYC Cyber Symposium, 2023