Caitlyn M. Campbell, a former US Securities & Exchange Commission (SEC) Enforcement Attorney, co-leads the firm’s SEC enforcement practice. She represents clients in SEC investigations, securities class action and derivative litigation and compliance matters. With more than two decades of experience in public service and private practice, Caitlyn advises on complex issues involving alleged violations of federal securities laws, including accounting fraud, disclosure and internal controls-related violations, regulatory violations by investment advisers and broker-dealers, insider trading, market abuse, anti-corruption and Foreign Corrupt Practices Act (FCPA) violations and whistleblower claims. She also assists companies in developing training programs and compliance policies and procedures.

Before joining McDermott Will & Schulte, Caitlyn served eight years at the SEC, including as Senior Counsel to the Directors of Enforcement, assisting with the management of the Commission’s largest division. At the SEC, Caitlyn led all aspects of investigations involving accounting fraud, complex insider trading schemes, market abuse, market manipulation, misappropriation of investor funds, investment adviser fraud and the Immigrant Investor Program. She also coordinated complex, cross-border investigations with foreign regulators. In addition to her investigative work, Caitlyn co-chaired the New England region committee that focused on proactively identifying accounting and disclosure fraud and served as liaison to both the SEC’s national Financial Reporting and Audit Group and the Boston FBI.

Caitlyn has conducted numerous internal investigations for major public companies, their boards of directors, and board committees.  She has represented public companies, audit firms, senior executives, registered investment advisers, hedge funds and private equity firms in matters before the SEC, US Department of Justice (DOJ), and the Financial Industry Regulatory Authority (FINRA). Her litigation experience includes representing corporations, directors, and officers in securities class actions and shareholder derivative suits. She has also advised clients in Special Purpose Acquisition Company (SPAC)-related litigation and SEC investigations.

A frequent speaker on enforcement, accounting fraud, and internal investigations, Caitlyn is recognized for her deep understanding of the intersection between regulatory expectations and corporate governance.

Mark E. Schreiber focuses his practice on cybersecurity, data breach response, Payment Card Industry (PCI), global privacy coordination, and AI governance. He advises entities facing cross-border data protection, the General Data Protection Regulation (GDPR), privacy frameworks, strategic decisions, cyber assessments and investigations. Mark has led numerous multinational and cross-border matters and internal investigations, including those involving data breaches, data transfer and credit card/PCI matters. He has advised senior management, boards, and special board committees on a variety of investigations, including data breach prevention and response.

Mark has spoken around the world on topics related to data breaches and related defense litigation strategy, overlapping international data protection compliance, and other privacy topics. He has also given cyber, privacy, and AI presentations to delegations from some 80 countries during numerous State Department sponsored international visits. He helped found and was chair for over a decade of the Privacy and Data Protection Group of the World Law Group, an international affiliation of large law firms in some 65 countries, and received the “2012 World Law Group Practice/Industry Group Leader of the Year Award” in recognition of his privacy and data protection work, including managing two global data protection publications. In addition, Mark helped found and was co-chair of the Boston Bar Association’s Privacy Law Committee. He is also a Certified Information Privacy Professional (CIPP/US) and has given a variety of presentations for the International Association of Privacy Professionals (IAPP).

Mark has also practiced, written and lectured widely on topics related to employment law, including presentations to the Flaschner Judicial Institute for judges. Prior to entering private practice, he was the chief trial lawyer for the Massachusetts Commission Against Discrimination (MCAD).

Brian Long focuses his practice on transactional and regulatory matters, with an emphasis on cybersecurity. He counsels clients on cyber breach response; cybersecurity maturity and risk assessments under frameworks such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and the International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 27001; compliance with NIST SP 800-171 and the Cybersecurity Maturity Model Certification (CMMC) program; artificial intelligence (AI) governance; and audit support and management.

Brian also drafts, reviews, and updates cybersecurity agreements and general technology contracts and supports clients in sophisticated information technology and business process outsourcing transactions. He regularly helps clients navigate complex private equity transactions, drawing on his experience with technology, security, AI, and intellectual property matters.

While in law school, Brian served as lead articles editor of the SMU Law Review.

Prior to attending law school, Brian spent more than 20 years working as a consultant, focusing on cybersecurity, information security, and IT risk management for US and global companies, primarily in regulated industries. He brings extensive knowledge of hacking mechanisms and security controls, IT operations, and information security standards for the financial services, healthcare, and energy industries, among others. He also contributed cybersecurity, privacy, and export controls updates to Outsourcing: Law and Business.