WASHINGTON, D.C. (October 1, 2025) – Holland & Knight has expanded its Data Strategy, Security & Privacy (DSSP) Group with the addition of Matthew B. Welling as a partner in its Washington, D.C., office. He was previously a partner at Crowell & Moring, where he was a leader in the firm's Privacy and Cybersecurity practice.
Mr. Welling has helped clients navigate hundreds of cybersecurity and data privacy incidents, including some of the most prominent matters in recent years. His practice equally focuses on proactive counseling, working with clients to identify, contextualize and address areas of cybersecurity and other technology-linked risks. Mr. Welling has developed and updated incident response plans and related policies and procedures for dozens of prominent companies and regularly designs and facilitates tabletop exercises for client executives and technical teams.
"We are thrilled to welcome Matthew to our DSSP group. His arrival marks a strategic expansion of our capabilities in cybersecurity, particularly in incident response and front-end counseling," said Mark Melodia, head of the Firm's Data Strategy, Security & Privacy Group. "Matthew brings a strong combination of technical depth and regulatory insight that aligns perfectly with the evolving needs of our clients. His experience navigating complex investigations and advising on critical infrastructure projects will be invaluable as we continue to help clients manage risk and stay ahead of emerging threats."
Mr. Welling also has considerable experience in the energy sector, representing clients in a range of regulatory, transactional, policy and litigation-related issues at the state and federal levels, including matters before the Federal Energy Regulatory Commission (FERC) and state regulatory commissions.
"I'm excited to join the DSSP group and contribute to a practice that is at the forefront of helping clients navigate today's most pressing data and cybersecurity challenges. The intersection of technology, regulation and risk is evolving rapidly, and I look forward to leveraging my experience to support clients in building resilient strategies," Mr. Welling said. "This is especially important in sectors such as energy, national defense and healthcare, where the pace of innovation and the complexity of regulatory frameworks demand both technical insight and practical guidance."
Mr. Welling received a J.D. degree from Georgetown University Law Center and a B.S. degree from Indiana University. He is admitted to practice law in the District of Columbia and Virginia. He is currently a lecturer at Johns Hopkins University Information Security Institute's Master of Science in Security Informatics program.