Gabe Maldoff

Gabe Maldoff is an associate in Goodwin’s Data, Privacy, and Cybersecurity practice. He provides a global perspective on privacy, artificial intelligence (AI), and technology law issues, drawing from his experience practicing in the UK, US, and with an international think tank. Gabe advises on privacy, cybersecurity and AI governance, the development of data-driven products, corporate transactions, and managing privacy, cybersecurity and AI investigations by regulators in the U.S. and Europe.

Gabe is also an Adjunct Professor at Maine Law School where he teaches a course called Global Privacy Law. His research on US, Canadian and European privacy and national security laws has featured in journals in the US and Europe.

Gabe counsels clients in a variety of sectors on privacy, cybersecurity, and other emerging data regulations, with particular focus on international frameworks, cross-border transactions, artificial intelligence regulation, augmented and virtual reality, and other data-driven technologies.

His representative matters include:

• Counselling technology, health and life sciences companies, and consumer brands on implementing of governance programs designed to comply with the General Data Protection Regulation (GDPR), the Federal Trade Commission (FTC) Act, the California Consumer Privacy Act (CCPA), and other federal, state, and international privacy frameworks
• Advising technology platforms on cutting edge privacy issues, including governance of artificial intelligence (AI), facial recognition technologies, virtual and augmented reality, and data portability
• Advising life sciences companies on clinical trials, vendor management, data sharing for research and public interest purposes, and the acquisition and integration of target companies
• Implementing strategies to address international data transfer compliance
• Managing investigations relating to privacy, cybersecurity, and antitrust/competition, including inquiries by the FTC, European data protection authorities, and U.S. state attorneys-general

Before joining Goodwin, Gabe worked for top-ranked law firms in London, UK, and Washington, DC He also served as a Westin Fellow at the International Association of Privacy Professionals.

Gabe is a Certified Information Privacy Professional (CIPP/US).

Gabe’s recent publications and speaking engagements include:

• Panelist, “Emerging Best Practices in Health Care Technology and Marketing: Changing Tides,” IAPP Global Privacy Summit, April 3, 2024
• Co-Author, “Anonymisation Through Separation: What Recent Cases Teach us About the EU’s Anonymisation Standards,” Privacy & Data Protection, January/February 2024
• Panelist, “Immersive Tech Panel Series: Advertising,” Future of Privacy Forum, August 22, 2023
• Co-Author, “The Sephora Case: Do Not Sell – But Are You Selling?,” International Association of Privacy Professionals, 2022
• Interviewee, "What’s the Deal with Data Portability? Understanding the Competition and Privacy Aspects Surrounding the Movement of Data," Our Curious Amalgam (ABA Podcast), November 30, 2020
• "New Data Privacy Frontiers: India’s Draft Personal Data Protection Bill," American Bar Association, June 19, 2020
• "Friends or Foes? The Public’s Battle with Data, Privacy, and the Internet: The 2020 JOSTL & PILJ Symposium," Boston University Law School Symposium, Boston, February 8, 2020
• Co-Author, "Born in the USA: The GDPR and the Case for Transatlantic Privacy Convergence," Colorado Tech. L. J., 2019
• Co-Author, "The Costs of Not Using Data: Balancing Privacy and the Perils of Inaction," George Mason University J. of L., Econ. & Pol’y, 2019
• Co-Author, "'Essential Equivalence' and European Adequacy After Schrems: the Canadian Example," 34 Wis. Int'l L.J., 2017 
• Author, "How the GDPR changes the rules for research," IAPP Privacy Advisor, April 19, 2016
• Co-Author, "Top 10 Operational Impacts of GDPR," IAPP Privacy Advisor, December 2016