Photograph of Matthew B. Welling View LinkedIn page Download V-card

Matthew B. Welling

Phone: +1 202.624.2588
1001 Pennsylvania Avenue NW
Washington, DC 20004-2595

Matthew B. Welling is a counsel in Crowell & Moring's Washington, D.C. office, where he practices in the firm's Privacy & Cybersecurity and Energy groups. Matthew has a deep technical background that he leverages to represent clients in a wide range of counseling and regulatory matters. His experience includes cybersecurity and privacy incident response, compliance reviews, risk assessments, and the development of corporate policies and procedures, such as incident response plans. Matthew has a diverse background in M&A and other corporate transactional issues, with specific recent experience with technology transactions, cybersecurity issues, and critical infrastructure project development.

Matthew is a leader in Crowell & Moring’s Blockchain / Distributed Ledger Technology (DLT) practice and speaks frequently on blockchain and DLT issues. He is currently a vice chair of the ABA’s Information Security Committee of its Science & Technology Law section.

Prior to practicing law, Matthew was a software developer and management consultant with PricewaterhouseCoopers, IBM, and Accenture.


Utilizing his technical background, Matthew advises clients on a wide range of cybersecurity and privacy issues. Matthew regularly counsels clients through responding to and managing cyber incidents and data breaches, and he has experience covering the full incident response lifecycle. Matthew has helped numerous clients develop or modernize their incident response programs and other cyber-related corporate policies and procedures, across industries that include energy & critical infrastructure, finance & banking, government contractors, media, hospitality, and IT service providers. He has also led privileged investigations, conducted tabletop simulations and other training exercises, interacted with regulators and law enforcement, and counseled clients through a diverse range of cybersecurity-related disputes.


Matthew frequently represents companies in technology-focused M&A activities and has significant experience with cybersecurity and privacy-related transactional due diligence and post-merger integration matters for both buyers and sellers across a broad range of industries. Matthew’s experience also includes helping clients develop novel information technology due diligence programs and counseling clients through incident response and forensic investigations arising in the course of M&A activities. Matthew additionally advises clients on a wide range of commercial transactions involving cybersecurity and other technology-related issues.


Matthew is an active leader in the firm’s Blockchain and DLT practice, where he is a Business Lead in Crowell’s Digital Transformation initiative. He advises clients on security and regulatory issues related to blockchain applications, helps clients navigate service provider relationships, and is currently engaged with clients developing novel blockchain and DLT projects in multiple industries. Matthew frequently speaks and conducts trainings on blockchain-related issues, both publicly and for clients.


Matthew also has considerable experience in the energy sector, representing clients in a range of regulatory, transactional, policy, and litigation-related issues at the state and federal levels, including matters before the Federal Energy Regulatory Commission (FERC) and state regulatory commissions. Matthew has significant experience in energy project development, and the projects he has worked on include renewable energy (wind, solar and biomass), energy storage, natural gas, and coal-fired generation facilities. His clients include wind and solar developers, merchant generators, integrated utilities, rural electric cooperatives, municipal utilities, manufacturers of equipment, and industrial wholesale customers. Matthew also counsels clients on NERC reliability standards.

Additionally, Matthew has advised numerous clients on appliance energy conservation standards before the U.S. Department of Energy (DOE), including multiple appeals to FERC under the Energy Policy and Conservation Act (EPCA), and before the California Energy Commission (CEC).

Matthew graduated with honors from Indiana University's Kelley School of Business in 2002 with a B.S. in business administration and a concentration in computer information systems. He also has a minor in Spanish.

Matthew received his law degree from the Georgetown University Law Center in 2010, where he served as the managing editor of the Georgetown Journal of Law and Public Policy. During law school, Matthew twice clerked for Sen. John Cornyn on the United States Senate Committee on the Judiciary.


  • Indiana University, B.S. (2002) with honors
  • Georgetown University Law Center, J.D. (2010)


Admitted to practice: District of Columbia, Virginia

View More

"States and Major Environmental and Consumer Organizations Threaten to Sue the Department of Energy Over Alleged Delays in Issuing Energy Efficiency Standards," Energy Law Alert (August 13, 2020). Contacts: Cheryl A. Falvey, Tyler A. O'Connor, Matthew B. Welling, Charlene Sun
Client Alert / Newsletter
"Department of Energy Solicits Comments on Energy Efficiency Standards for External Power Supplies," Energy Law Alert (May 29, 2020). Contacts: Tyler A. O'Connor, Matthew B. Welling, Charlene Sun
Client Alert / Newsletter
Securing The Remote Bank Workforce ABA Banking Journal (May 18, 2020)
Media Mentions
"Appliance Standards Update," Retail Industry Leaders Association (RILA) Consumer Product Committee Monthly Call, Webinar (May 12, 2020). Presenters: Tyler O’Connor and Matthew Welling.
"Department of Energy Solicits Comments On Energy Efficiency Test Procedures for Battery Chargers," Energy Law Alert (May 11, 2020). Contacts: Tyler A. O'Connor, Matthew B. Welling, Cheryl A. Falvey, Charlene Sun
Client Alert / Newsletter
"Privacy and Cybersecurity in the Time of COVID-19: What Comes Next?," Privacy Law Alert (April 20, 2020). Contacts: Jeffrey L. Poston, Evan D. Wolff, Matthew B. Welling
Client Alert / Newsletter
"Mobile Applications For COVID Tracking & Tracing – Balancing the Need for Personal Information and Privacy Rights in the Time of Coronavirus," Privacy Law Alert (April 15, 2020). Contacts: Kristin J. Madigan, CIPP/US, Jeffrey L. Poston, Jarno Vanto, Evan D. Wolff, Brandon C. Ge, Matthew B. Welling, Michael G. Gruden, CIPP/G, Lee Matheson, CIPP/US/E/A, CIPM, PCIP
Client Alert / Newsletter
"Tele-Hacking: Video Conference Hijacking and Steps You Can Take To Mitigate The Risk and Respond," Privacy Law Alert (April 3, 2020). Contacts: Evan D. Wolff, Paul M. Rosen, Gabriel M. Ramsey, Kate M. Growley, CIPP/G, CIPP/US, Matthew B. Welling, Kayvan M. Ghaffari
Client Alert / Newsletter
"Ensuring Cybersecurity When Organizations Consider Teleworking and Remote Access," Privacy Law Alert (March 11, 2020). Contacts: Jeffrey L. Poston, Paul M. Rosen, Evan D. Wolff, Maida Oringher Lerner, Matthew B. Welling
Client Alert / Newsletter
"Lessons from M&A Cyber Due Diligence and How to Leverage Them for Supply Chain Risk," 2019 GRF Summit on Security & Third-Party Risk, Leesburg, VA (October 2, 2019). Panelist: Matthew B. Welling.

For all Highlights, News & Knowledge, please click here to view desktop bio.

Crowell & Moring LLP is an international law firm with more than 500 lawyers representing clients in litigation and arbitration, regulatory, and transactional matters. The firm is internationally recognized for its representation of Fortune 500 companies in high-stakes litigation, as well as its ongoing commitment to pro bono service and diversity. The firm has offices in Washington, DC, New York, Los Angeles, San Francisco, Orange County, London, Brussels, and Shanghai.

View Desktop Site | Mobile Sitemap

Contact | Subscribe | Terms of Use | Privacy Statement | Alumni

© Crowell & Moring LLP 2020
Attorney advertising - prior results do not guarantee a similar outcome.