Chelsea Rissmiller focuses her practice on cybersecurity, incident response, and regulatory enforcement. She assists companies across a wide range of industries in preparing for, responding to, and recovering from cyber incidents, including complex multijurisdictional data breaches. Her work includes coordinating forensic investigations, guiding internal teams through rapid response decision making, and developing defensible strategies for containment, notification, and remediation. Chelsea also leads crisis communications during high stakes incident response, ensuring that internal and external messaging aligns with legal, regulatory, and operational priorities. Her balanced approach helps clients weigh security and operational risk, refine compliance programs, and reduce incident risk and enforcement exposure.
Chelsea advises clients on regulatory compliance and enforcement risks under federal and state data protection, security, and privacy laws, including the California Consumer Privacy Act, the Gramm Leach Bliley Act, the Health Insurance Portability and Accountability Act, and the Federal Trade Commission Act. She regularly counsels public companies on cybersecurity governance and disclosure obligations, and she supports boards and senior leaders in evaluating cyber readiness and risk mitigation practices.
Her background includes service in the US Securities and Exchange Commission's Cyber Unit within the Division of Enforcement (Honors Program). This experience informs her approach to regulatory investigations, enforcement scrutiny, and incident response preparation. Chelsea has also supported federal court matters involving complex eDiscovery disputes, which strengthens her ability to advise on information governance and data handling obligations.
In addition to her client work, Chelsea speaks frequently on cybersecurity investigation strategy, reasonable security expectations, and evolving enforcement trends. She contributes thought leadership on developments in privacy regulation and helps organizations build durable, operationally practical compliance programs that withstand regulatory examination.
Chelsea is a Certified Information Privacy Professional (CIPP/US) and remains active in professional communities dedicated to cybersecurity, privacy, and information governance.
