Carly Rothstein is an Associate at Mandelbaum Barrett PC, primarily working within the Firm’s Cybersecurity and Data Privacy practice group. She provides ongoing counsel on compliance with the GDPR, CCPA, HIPAA, New York Shield Act, and other state and federal privacy laws.

Carly obtained her J.D. from the Benjamin N. Cardozo School of Law, distinguishing herself both academically and through her leadership positions as Editor in Chief of Cardozo’s Arts and Entertainment Law Journal and Director of Community Outreach for the Cardozo Wine Society. She received her B.A., summa cum laude, in History and Psychology from the University of Alabama. During her time at the Cardozo School of Law, she worked with the Filmmakers Legal Clinic to advise independent, social justice-oriented filmmakers on transactional, intellectual property, and First Amendment matters. Through her law school internships and coursework, Carly has gained extensive knowledge in areas including internet, privacy, copyright, advertising, and sweepstakes law.

  • Member, New York City Bar Association
  • Member, New York State Bar Association

New York

  • J.D. from the Benjamin N. Cardozo School of Law
  • B.A. from the University of Alabama

When the Breach Hits the Docket: How Law Firms Should Respond When Client Files Leak to the Dark Web

October 10, 2025

When a law firm experiences a data breach, which includes both unauthorized data access as well as disclosure, the consequences extend far beyond reputational harm. Increasingly, attackers exfiltrate entire client files—including documents filed under seal or protected by attorney–client privilege—and post them on the dark web. Once that happens, courts can’t “unring the bell,” and firms must navigate a complex mix of ethical duties, procedural obligations, and legal protections.
LEARN MORE

Carly Rothstein Joins the New York City Bar Association’s Technology, Cyber, and Privacy Law Committee

August 6, 2025

We’re proud to share that Carly Rothstein, Associate in our Cybersecurity & Data Privacy Practice Group, has been selected to join the New York City Bar Association’s Technology, Cyber, and Privacy Law Committee.
LEARN MORE

Strengthening HIPAA Security: Key Updates to Protect Healthcare Data from Steven Teppler and Carly Rothstein

March 14, 2025

Now’s the time to get ahead—understanding these updates will help you stay compliant and protect against growing cyber threats.
LEARN MORE