Biography:
Mary T. Costigan is a principal with Jackson Lewis, P.C. and a member of the firm’s Privacy, AI & Cybersecurity practice group. She is an IAPP Certified Information Privacy Professional, holding US and EU designations.
Mary has broad experience advising clients of all sizes on U.S. and global privacy and security regulations including the California Consumer Privacy Act, the DOJ Bulk Data Transfer Rule, HIPAA/HITECH, and CAN-SPAM as well as matters relating to AI governance and biometric data collection. For multinational clients, she helps operationalize compliance with the General Data Protection Regulation, the EU e-Privacy Directive and U.K. PECR, the EU AI Act, and cross border transfers of data.
Leveraging her extensive experience as a data breach coach, Mary provides strategic counsel to clients navigating cybersecurity incidents and responding to related regulatory inquiries.
Mary serves as co-chair of the National Association of Women Lawyers Privacy and Cybersecurity affinity group and is a member of the IAPP Women Leading Privacy Advisory Board. She is recognized for her work by The Best Lawyers in America©, “Employment Law – Management” (2024-present), The Best Lawyers in America©, “Privacy and Data Security Law” (2025-present), and the Lexology Index, “Client Choice Award” (2026).
Awards & Recognition
- The Best Lawyers in America©, “Employment Law – Management” (2024-present)
- The Best Lawyers in America©, “Privacy and Data Security Law” (2025-present)
- the Lexology Index, “Client Choice Award” (2026).
Memberships
- International Association of Privacy Professionals (iapp) (CIPP certifications – EU, US)
- National Association of Women Lawyers (NAWL)
Speaking Engagements
- Jackson Lewis, PC; webinar: “India’s Digital Personal Protection Act 2023”, March 2025 (panelist)
- National Home Delivery Association Forum; Technology Roundtable panel: “Enhancing Cybersecurity in Final Mile Operations”, July 2025 (speaker, moderator)
- National Association of Women Layers; webinar: “Cyber Claims and Insurance”, October 2025 (speaker)
- Association of Corporate Counsel (U.S.): webinar, “Ransomware Attacks: What every in-house counsel should know.” December 11, 2025 (panelist, moderator)