Matthew F. Ferraro
Overview
Matthew F. Ferraro is a partner in Crowell & Moring’s Privacy and Cybersecurity Group, where he helps clients address complex regulatory matters at the intersection of advanced technology, national security, and crisis management. He advises leading organizations on high-impact matters related to artificial intelligence (AI) and other emerging technologies, cyberattacks, domestic and international privacy compliance, internal investigations, foreign direct investment reviews, and high-stakes crises.
Career & Education
- Department of Homeland Security
- Senior Counselor for Cybersecurity and Emerging Technology to the Secretary, 2023–2025; Executive Director of the Artificial Intelligence Safety and Security Board, 2024–2025
- Central Intelligence Agency (CIA)
- Intelligence Officer, 2009–2010
- Office of the Director of National Intelligence
- Executive Assistant to the Deputy Director for Policy, Plans, and Requirements, 2007–2009
- Special Assistant to the Chief of Staff, 2006–2007
- Department of Homeland Security
- Adjunct Professor of Law, George Mason University, 2022–Present
- Stanford Law School, J.D., with pro bono distinction, 2013
- University of Cambridge, MPhil, historical studies, with distinction, 2005
- Yale University, B.A., history, with distinction, 2004
- District of Columbia
- California
- U.S. Court of Appeals for the District of Columbia Circuit
- U.S. Court of Appeals for the Ninth Circuit
- The Hon. John G. Koeltl, U.S. District Court for the Southern District of New York, 2015–2016
- The Hon. A. Raymond Randolph, U.S. Court of Appeals for the District of Columbia Circuit, 2014–2015
- The Hon. Jay S. Bybee, U.S. Court of Appeals for the Ninth Circuit, 2013–2014
- Life Member, Council on Foreign Relations, 2025–Present (Term Member, 2017–2023)
- Senior Fellow, National Security Institute, 2018–Present
Matthew's Insights
Client Alert | 2 min read | 02.18.26
DHS Announces Virtual Town Halls on CIRCIA Final Rule
On February 13, 2026, the U.S. Department of Homeland Security (DHS) announced upcoming virtual town hall meetings scheduled for March 2026 regarding the implementation of the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). The meetings will allow industry stakeholders to provide input to DHS to refine the “scope and burden” of the forthcoming CIRCIA final rule.
Speaking Engagement | 02.05.26
"AI Regulation Update: Getting Ahead of New U.S. State Laws," Bridge Summit 2026
Press Coverage | 02.05.26
Chatbot Developers Brace For Impending Wave Of State Regulation
Press Coverage | 02.05.26
Chatbot Developers Brace for Impending Wave of State Regulation
Insights
Three Steps Tech Companies Can Take Today To Prepare To Ride A Blue Wave In 2026
|11.14.25
Washington Technology
Staying Compliant After Trump AI Executive Order Introduces Regulatory Uncertainty
|01.14.26
Cybersecurity Law Report
California’s Landmark AI Transparency Law: Compliance Considerations
|10.29.25
Cybersecurity Law Report
California’s Landmark AI Transparency Law: Covered Entities, Reporting Requirements And Penalties
|10.29.25
Cybersecurity Law Report
CMMC for AI? Defense Policy Law Imposes AI Security Framework and Requirements on Contractors
|01.08.26
Crowell & Moring’s Government Contracts Legal Forum
The FY 2026 National Defense Authorization Act
|12.29.25
Crowell & Moring’s Government Contracts Legal Forum
Federal and State Regulators Target AI Chatbots and Intimate Imagery
|10.30.25
Crowell & Moring’s State AG Blog
Coming Soon: “Drone & Order” – A series on FAA rulemaking, BVLOS, and the future of UAS
|08.28.25
Crowell & Moring’s Transportation Law: Moving Forward
Fastest 5 Minutes: DOJ Guidance re DEI, White House AI Action Plan
|08.04.25
Crowell & Moring’s Government Contracts Legal Forum
- |
08.01.25
Crowell & Moring’s Government Contracts Legal Forum
Matthew's Insights
Client Alert | 2 min read | 02.18.26
DHS Announces Virtual Town Halls on CIRCIA Final Rule
On February 13, 2026, the U.S. Department of Homeland Security (DHS) announced upcoming virtual town hall meetings scheduled for March 2026 regarding the implementation of the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). The meetings will allow industry stakeholders to provide input to DHS to refine the “scope and burden” of the forthcoming CIRCIA final rule.
Speaking Engagement | 02.05.26
"AI Regulation Update: Getting Ahead of New U.S. State Laws," Bridge Summit 2026
Press Coverage | 02.05.26
Chatbot Developers Brace For Impending Wave Of State Regulation
Press Coverage | 02.05.26
Chatbot Developers Brace for Impending Wave of State Regulation



