John P. Carlin has joined Paul, Weiss, Rifkind, Wharton & Garrison LLP as Co-Head of the firm’s Cybersecurity & Data Protection practice and as a Partner in the Litigation Department.

In his new role, Carlin will focus on sensitive cyber incident response and preparedness, crisis management, national security issues, white collar defense and regulatory enforcement, and Committee on Foreign Investment in the United States (CFIUS) and the Foreign Agents Registration Act (FARA) proceedings. In addition, he will co-lead the Cybersecurity & Data Protection practice with former Secretary of Homeland Security Jeh C. Johnson and former federal prosecutor Jeannie Rhee, two of the leading cybersecurity and data privacy experts in the country.

Previously, Carlin was the top incoming appointee at the Department of Justice as the Acting Deputy Attorney General from January to April 2021. He subsequently served as Principal Associate Deputy Attorney General advising Deputy Attorney General Lisa Monaco and Attorney General Merrick Garland on the supervision of the department, including oversight of the FBI, an initiative to curb corporate crime, and task forces to address cryptocurrency theft and crack down on those helping Russia evade sanctions. He also played a pivotal role in instituting the Department of Justice’s current approach to cybersecurity, national security and corporate criminal enforcement.

Carlin has deep experience leading high-profile national security and criminal enforcement matters. He previously served as Assistant Attorney General for the DOJ’s National Security Division, making him the department’s highest-ranking national security lawyer. In this role, he supervised 400 employees responsible for protecting the nation against terrorism, espionage, cyber and other national security threats. During his tenure, he oversaw the prosecution of the Boston Marathon bomber; the indictment of five Chinese military members on economic espionage charges; and the DOJ’s foreign investment review program, which includes the review of foreign acquisitions through CFIUS, Federal Communications Commission (FCC) reviews and other emerging technology matters and related litigation.

Carlin also brings significant private practice experience advising companies responding to a variety of urgent global, national security and cyber threats and crises. Prior to his time at the DOJ, Mr. Carlin chaired an Am Law 100 firm’s global risk and crisis management group, where he advised clients across the technology, healthcare, energy, defense, finance, media, pharmaceutical and telecommunications industries on crisis management, company-crippling cyber incidents, regulatory strategy and CFIUS issues.

Congratulations!