Profile
Megan is a partner in the firm’s Chambers-ranked Telecom, Media & Technology Practice and co-chairs the firm’s Privacy, Cyber & Data Governance Practice. She handles complex government investigations across the U.S. government and her team advises global clients and associations on cybersecurity and data governance obligations, including incident reporting and operational mandates.
Megan helps organizations implement and respond to Executive Orders (AI, cybersecurity, data transfers, post-quantum cryptography, and more) and engage in proceedings at the CISA, FCC, FTC, DOJ, Commerce, and NIST, as well as on the state level. She oversees compliance with federal and state law enforcement requests. She has led a legal challenges to TSA cybersecurity mandates, advocates before Congress, and testified before the U.S. Senate.
As a former senior U.S. Department of Justice official, Megan helps clients navigate the Executive branch and with national security issues. She serves on the U.S. Chamber of Commerce’s Cybersecurity Leadership Council, is a Member of the Aspen Digital U.S. Cybersecurity Group, and is a Senior Fellow at the George Mason University Antonin Scalia Law School’s National Security Institute. Megan co-hosted a cybersecurity podcast with American University’s School of Public Service and CrowdStrike, and serves on the Board of the Women’s High-Tech Coalition.
Experience
Representative Matters
Incident Response, Counseling, and Compliance
- Manages cybersecurity events, including ransomware attacks and negotiations.
- Advises public and private companies on incident reporting, data security, and cybersecurity governance and disclosures, including compliance with new mandates across critical infrastructure.
- Advises federal contractors on cybersecurity obligations, supply chain, and software security.
- Advises manufacturers and technology companies on vulnerability disclosure policies and the handling of identified vulnerabilities, including with the Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security.
- Advises boards and senior management about data governance and emerging technologies, from AI to IoT, including geopolitical risk to business operations, via tabletop exercises and counseling.
- Represents private equity and investors in regulatory reviews of multi-billion dollar transactions in the telecom and technology sectors.
- Counsels clients on CFIUS and Team Telecom obligations, national security agreements, and letters of agreement.
Enforcement and Investigations
- Successfully resolved a multi-year, multi-jurisdiction FCC investigation into a national wireless carrier over multiple public data security incidents.
- Manages numerous FCC investigations into equipment regulation, supply chain, accessibility, compliance with federal funding regulations, and other regulatory issues.
- Represents organizations and individuals in Congressional inquiries and investigations.
Regulatory Advocacy and Litigation
- Represents companies and associations in proceedings before the FTC, FCC, CISA, SEC, Commerce, and DoD addressing incident reporting, data governance, privacy, internet routing security, federal procurement obligations, and more.
- Led a challenge in the United States Court of Appeals for the Seventh Circuit to cybersecurity directives issued by the Transportation Security Administration, in Grand Trunk Railroad Corp. and Illinois Central Railroad Co. v. TSA (Nos. 24-2109, 24-2156, 7th Cir.)
- Supports judicial review of agency decisions and litigation over cybersecurity and privacy regulatory actions and claims. This includes briefing for the United States Chamber of Commerce and other clients in cases like NetChoice v. Bonta, No. 23-2969 (9th Cir.), involving California’s Age-Appropriate Design Code, X-Corp. v. Bonta, No. 24-271 (9th Cir.), involving the constitutionality of a California social-media regulation law, and Popa v. PSP Group LLC, No. 24-14 (9th Cir.), a privacy class action over the use of session replay technology. It also includes briefing in challenges to FCC actions under Jarkesy and Loper Bright.
Professional Experience
- Appellate Courts Judicial Nominating Commission for Montgomery County, Maryland (2020-2024) (Gubernatorial Appointee)
- Trial Courts Judicial Nominating Commission for Montgomery County, Maryland (2015-2019) (Gubernatorial Appointee)
- Counsel to the Attorney General, U.S. Department of Justice (2007-2008)
- Legal Intern, U.S. Department of Justice, Office of the Solicitor General (2002)
- Legal Intern, Office of the U.S. Attorney for the District of Maryland, Greenbelt Division (2000)
- Provides commentary on a wide range of issues to media, including The Wall Street Journal, Bloomberg Law, the National Law Journal, CNN, and Fox News.
- Testified before the U.S. Senate Committee on Commerce, Science and Transportation Subcommittee on Communications, Media and Broadband, on Protecting Americans From Robocalls (October 24, 2023).
Affiliations
- Federal Communications Bar Association (FCBA)
- Co-Chair, FCBA Foundation Board of Trustees (2020)
- Member, FCBA Foundation Board of Trustees (2018-2021)
- Board Member, Women's High Tech Coalition (WHTC)
- Senior Fellow, National Security Institute’s Cybersecurity Law & Policy Program, George Mason University Antonin Scalia Law School
- Member, U.S. Chamber of Commerce Cybersecurity Leadership Council
- Member, Aspen Digital U.S. Cybersecurity Group
- Member, Advisory Board, National Association of Wholesale-Distributors Legal Policy Center
Recognitions
- Listed by Chambers Global as one of the "Leaders in Their Field" for her work in Privacy & Data Security: Cybersecurity (2026)
- Listed by Chambers USA as one of “America’s Leading Lawyers for Business” in Privacy & Data Security: Cybersecurity (2025-2026) and as a "Recognized Practitioner" in Privacy & Data Security (2019)
- Named to Law360's Cybersecurity & Privacy Editorial Advisory Board (2018, 2019)
- Named a "DC Rising Star" by The National Law Journal (2017)
- Recognized by Law360 as a "Rising Star" in Technology (2014) and Telecommunications (2017)
- Recognized as one of the nation's top Cybersecurity & Data Privacy Trailblazers by The National Law Journal (2016)
- Named by The Legal 500 US as a "recommended lawyer" in International Trade and National Security: National Security (2025), Telecom and Broadcast Regulatory Law (2012-2013) and Supreme Court and Appellate Law (2015)
- Named a DC "Super Lawyers" (2014-2016, 2020) and "Rising Star" (2013) for Appellate by Super Lawyers magazine
- Included in The Best Lawyers in America directory for Appellate Law (2023-2027), Privacy and Data Security Law (2022-2027), and Communications Law (2027)
- Named one of “Washington’s Top Lawyers” by Washingtonian magazine (2024)
Practice Areas
Credentials
Education
J.D., Harvard Law School
A.B., cum laude, College of William & Mary
Law Journals
Executive Editor, Harvard Journal of Law & Public Policy
Clerkships
- Law Clerk for the Honorable E. Grady Jolly, U.S. Court of Appeals for the Fifth Circuit (2002-2003)
Bar and Court Memberships
- District of Columbia Bar
- Maryland Bar
- Supreme Court of the United States
- U.S. Courts of Appeals for the First, Second, Fourth, Fifth, Sixth, Seventh, Eighth, Ninth, Federal, and District of Columbia Circuits
- U.S. District Court for the District of Columbia
Related News & Insights
- Media MentionWiley Blog on Stakeholder Engagement with Cyber Incident Reporting Rules Highlighted by Inside CybersecurityInside CybersecurityOctober 15, 2026
- EventAutomotive Cybersecurity at a Crossroads; Policy Resilience and the Road AheadMegan L. BrownOctober 8, 2026
- EventCybersecurity Law in the Age of AIIAPP Privacy. Security. Risk. + AI Governance Global 2026Megan L. BrownOctober 7, 2026
- Blog PostLast Call for Public Comment on DHS Cyber Incident Reporting Rules: CISA Sends CIRCIA Final Rule to OMB, Opening Window for Last-Minute Stakeholder EngagementWiley ConnectMegan L. Brown, Jacqueline F. "Lyn" Brown, Erin M. Joe, Joshua K. Waldman, Alissa LynwoodOctober 6, 2026
