Photograph of Matthew B. Welling

Matthew B. Welling


Matthew B. Welling is a partner in Crowell & Moring's Washington, D.C. office, where he practices in the firm's Privacy & Cybersecurity and Energy groups. Matthew has a deep technical background that he leverages to represent clients in a wide range of counseling and regulatory matters. His experience includes cybersecurity and privacy incident response, compliance reviews, risk assessments, and the development of corporate policies and procedures, such as incident response plans. Matthew has a diverse background in M&A and other corporate transactional issues, with specific recent experience with technology transactions, cybersecurity issues, and critical infrastructure project development.

Matthew is a leader in Crowell & Moring’s Blockchain / Distributed Ledger Technology (DLT) practice and speaks frequently on blockchain and DLT issues. He is currently a vice chair of the ABA’s Privacy and Computer Crime Committee of its Science & Technology Law section.

Prior to practicing law, Matthew was a software developer and management consultant with PricewaterhouseCoopers, IBM, and Accenture.


Utilizing his technical background, Matthew advises clients on a wide range of cybersecurity and privacy issues. Matthew regularly counsels clients through responding to and managing cyber incidents and data breaches, and he has experience covering the full incident response lifecycle. Matthew has helped numerous clients develop or modernize their incident response programs and other cyber-related corporate policies and procedures, across industries that include energy & critical infrastructure, finance & banking, government contractors, media, hospitality, and IT service providers. He has also led privileged investigations, conducted tabletop simulations and other training exercises, interacted with regulators and law enforcement, and counseled clients through a diverse range of cybersecurity-related disputes.


Matthew frequently represents companies in technology-focused M&A activities and has significant experience with cybersecurity and privacy-related transactional due diligence and post-merger integration matters for both buyers and sellers across a broad range of industries. Matthew’s experience also includes helping clients develop novel information technology due diligence programs and counseling clients through incident response and forensic investigations arising in the course of M&A activities. Matthew additionally advises clients on a wide range of commercial transactions involving cybersecurity and other technology-related issues.


Matthew is an active leader in the firm’s Blockchain and DLT practice, where he is a Business Lead in Crowell’s Digital Transformation initiative. He advises clients on security and regulatory issues related to blockchain applications, helps clients navigate service provider relationships, and is currently engaged with clients developing novel blockchain and DLT projects in multiple industries. Matthew frequently speaks and conducts trainings on blockchain-related issues, both publicly and for clients.


Matthew also has considerable experience in the energy sector, representing clients in a range of regulatory, transactional, policy, and litigation-related issues at the state and federal levels, including matters before the Federal Energy Regulatory Commission (FERC) and state regulatory commissions. Matthew has significant experience in energy project development, and the projects he has worked on include renewable energy (wind, solar and biomass), energy storage, natural gas, and coal-fired generation facilities. His clients include wind and solar developers, merchant generators, integrated utilities, rural electric cooperatives, municipal utilities, manufacturers of equipment, and industrial wholesale customers. Matthew also counsels clients on NERC reliability standards.

Additionally, Matthew has advised numerous clients on appliance energy conservation standards before the U.S. Department of Energy (DOE), including multiple appeals to FERC under the Energy Policy and Conservation Act (EPCA), and before the California Energy Commission (CEC).

Matthew graduated with honors from Indiana University's Kelley School of Business in 2002 with a B.S. in business administration and a concentration in computer information systems. He also has a minor in Spanish.

Matthew received his law degree from the Georgetown University Law Center in 2010, where he served as the managing editor of the Georgetown Journal of Law and Public Policy. During law school, Matthew twice clerked for Sen. John Cornyn on the United States Senate Committee on the Judiciary.


  • Indiana University, B.S. (2002) with honors
  • Georgetown University Law Center, J.D. (2010)


Admitted to practice: District of Columbia, Virginia

View More


Privacy and Cybersecurity


Critical Infrastructure Risk Management

Energy Litigation

Energy Storage

Natural Gas, LNG, and Oil

NERC - Electric Reliability

Renewable Energy

Blockchain and Financial Services Technology

Show more practices…

Crowell & Moring Advises Amazon in its $3.9 Billion Acquisition of One Medical (July 22, 2022)
Firm News / Announcement
"DOJ’s Revised Prosecutorial Guidelines: The “Ethical” Hacker Exemption," Privacy Law Alert (June 3, 2022). Contacts: Nimrod Haim Aviad, Stephen M. Byers, Matthew B. Welling, Evan D. Wolff, Alexander Urbelis, Anand Sithian, Paul C. Mathis
Client Alert / Newsletter
"SolarWinds Cyber-Attack Litigation Proceeds Against Company, Investors, and Individual," Privacy Law Alert (April 8, 2022). Contacts: Jeffrey L. Poston, Evan D. Wolff, Matthew B. Welling, Alexander Urbelis, Jacob Canter
Client Alert / Newsletter
"President Biden Signs Bill Expanding Cybersecurity Reporting Obligations," Privacy Law Alert (March 24, 2022). Contacts: Sarah Rippy, Matthew B. Welling, Evan D. Wolff, Maida Oringher Lerner, Alexander Urbelis, Michael G. Gruden, CIPP/G
Client Alert / Newsletter
"SEC Proposes New Cybersecurity Risk and Incident Disclosure Obligations," Privacy Law Alert (March 15, 2022). Contacts: Evan D. Wolff, Matthew B. Welling, Daniel L. Zelenko, Garylene (Gage) Javier, CIPP/US
Client Alert / Newsletter
"Additional States Plan for the Implementation of Data Privacy Laws," Advertising & State AG Alert (March 1, 2022). Contacts: Toni Michelle Jackson, Matthew B. Welling, Sarah Rippy, Roy Abernathy
Client Alert / Newsletter
"CISA Issues Alert Warning Against Russian State-Sponsored Attacks on Cleared Defense Contractors," Privacy Law Alert (February 18, 2022). Contacts: Matthew B. Welling, Maida Oringher Lerner, Evan D. Wolff, Peter Eyre
Client Alert / Newsletter
"How To Comply With New Multiline Telephone System Rules," Law360 (February 9, 2022). Authors: Evan D. Wolff, Maida Oringher Lerner, Matthew B. Welling, and Garylene Javier.
Major DC Law Firms Promote Sizable Partner Classes For 2022 The National Law Journal (January 10, 2022)
Press Coverage
Crowell & Moring Elects 13 New Partners, Promotes Seven to Senior Counsel, and 19 to Counsel (January 3, 2022)
Firm News / Announcement

For all Highlights, News & Knowledge, please click here to view desktop bio.

Crowell & Moring LLP is an international law firm with offices in the United States, Europe, MENA, and Asia that represents clients in litigation and arbitration, regulatory and policy, and transactional and corporate matters. The firm is internationally recognized for its representation of Fortune 500 companies in high-stakes litigation and government-facing matters, as well as its ongoing commitment to pro bono service and diversity, equity, and inclusion.

View Desktop Site | Mobile Sitemap |

Contact | Subscribe | Terms of Use | Privacy Statement | Alumni

© Crowell & Moring LLP 2022
Attorney advertising - prior results do not guarantee a similar outcome.