Mercedes Jenkins

Mercedes Jenkins advises clients through all phases of cyber incident response, from threat discovery and forensic investigation to remediation, recovery, and long-term risk mitigation. She regularly supports privileged investigations involving data breaches, ransomware attacks, business email compromise, unauthorized access events, and suspected data exfiltration. Her experience includes coordinating forensic investigations, developing legal hold and preservation strategies, analyzing regulatory and contractual notification obligations, supporting executive communications, engaging with law enforcement and third-party forensic experts, and advising on crisis management and remediation efforts.

Mercedes also assists clients with complex cybersecurity investigations involving regulated entities. Her work includes matters involving government contracting requirements, cybersecurity compliance obligations, including compliance with FAR and DFARS, regulatory inquiries, internal investigations, and potential litigation or enforcement exposure. She supports clients in conducting privileged investigations, preserving and reviewing evidence, coordinating forensic response efforts, assessing regulatory risks, developing strategic communications, and preparing for potential litigation.

In addition, Mercedes advises clients on state, federal, and international privacy, cybersecurity, artificial intelligence, advertising technology, and other data-related legal and regulatory issues. Her experience includes counseling clients on compliance with the GDPR, CCPA, other US state comprehensive privacy laws, BIPA, CAN-SPAM, HIPAA, and the GLBA.

• Westin Scholar Award for “Excellence in Privacy,” IAPP (2023)
• Young Luminary Award, Maryland Carey Law (2024)
• William P. Cunningham Award, Maryland Carey Law (2024)

• International Association of Privacy Professionals
• Hispanic National Bar Association

• Chicago

• Hispanic/Latinx Network - Unidos