Debevoise & Plimpton LLP announced today that Matthew Kelly has joined the firm’s New York office as counsel and a member of its award-winning Data Strategy & Security Group. Mr. Kelly will help lead the Group’s AI advisory work, an area where the firm is a recognized market-leader according to a recent feature in The American Lawyer, and advise on complex, high-impact cybersecurity matters, including those involving state and federal investigations.

Mr. Kelly brings to the firm extensive experience advising public companies, and companies across the financial services sector, on internal investigations and regulatory matters involving data strategy, governance and compliance. He has advised clients on the usage of quantitative modeling tools and data-driven operations, and on the design and implementation of post-Dodd-Frank model governance frameworks, which is critical as AI becomes a more commonly used corporate technology tool. Mr. Kelly has also led multiple advisory and regulatory matters related to algorithmic trading and data governance for broker-dealer and investment advisory clients, including SEC, FINRA, and New York Attorney General investigations.

“With generative AI applications becoming increasingly mainstream across the corporate landscape and global AI regulations constantly evolving, companies now face more legal and compliance risks than ever before,” said Avi Gesser, Co-Chair of the firm’s Data Strategy & Security Group. “Matt is a versatile lawyer with strong technical proficiency and regulatory experience on AI matters, and his background on high-stakes cybersecurity and data privacy issues make him an excellent addition to meet the firm’s growing demand of clients needing strategic and bespoke legal services in this space.”

Prior to joining Debevoise, Mr. Kelly was counsel at another international law firm where he represented leading financial services firms and public companies on cybersecurity, data governance, and data privacy matters, as well as on commercial disputes, regulatory inquiries and internal investigations. Mr. Kelly received his J.D. from Harvard University in 2009, and his B.A. from Wesleyan University in 2005.

The Data Strategy & Security Group of Debevoise & Plimpton helps clients anticipate and respond to cybersecurity, privacy, artificial intelligence, business continuity, M&A diligence and data governance matters. With strong expertise in federal and state investigations, the cyberthreat landscape and emerging AI technologies and regulations, the Group also advises clients with their overall data strategy, including how to manage, protect, and optimize their data. Comprised of seasoned lawyers and former U.S. law enforcement officials, the Group also offers a groundbreaking suite of tools, recognized by the Financial Times, that help clients address business critical data security and artificial intelligence regulatory issues.


Luke Dembosky is a Debevoise litigation partner based in the firm’s Washington, D.C. office. He is Co-Chair of the firm’s Data Strategy & Security practice and a member of the White Collar & Regulatory Defense Group. His practice focuses on cybersecurity incident preparation and response, internal investigations, civil litigation and regulatory defense, as well as national security issues. He can be reached at


Avi Gesser is Co-Chair of the Debevoise Data Strategy & Security Group. His practice focuses on advising major companies on a wide range of cybersecurity, privacy and artificial intelligence matters. He can be reached at


Erez is a litigation partner and a member of the Debevoise Data Strategy & Security Group. His practice focuses on advising major businesses on a wide range of complex, high-impact cyber-incident response matters and on data-related regulatory requirements. Erez can be reached at