Gabe Maldoff

Gabe Maldoff is a partner in Goodwin’s Data, Privacy, and Cybersecurity practice and strategic counsellor to innovative and high-growth companies navigating complex global data and technology challenges. 

Drawing on experience practicing in the US and Europe, Gabe advises emerging and established technology companies, leading AI developers, research organizations, and businesses in highly regulated sectors on privacy and data protection laws, AI regulation and governance, online safety, regulatory investigations, and biosafety. 

A member of Goodwin’s Technology, Life Sciences, and Healthcare industry sectors, his practice focuses on translating an increasingly complex global regulatory landscape into practical, actionable advice that enables companies to innovate, launch products, and scale responsibly.  

Gabe is also a senior affiliate fellow at the Center for Law + Innovation and adjunct professor at Maine Law School where he teaches a course called Global Privacy Law. He formerly served on the EU-US Privacy Shield arbitration panel. His research on US, Canadian, and European privacy and national security laws has featured in journals in the US and Europe.

Gabe counsels clients in a variety of sectors on privacy, cybersecurity, and other emerging data regulations, with particular focus on international frameworks, cross-border transactions, artificial intelligence regulation, augmented and virtual reality, and other data-driven technologies.

His representative matters include:

• Advising leading AI developers, technology companies, and research organizations on privacy, AI governance, model development, cybersecurity, biosafety, and emerging data regulations
• Counselling executive, product, engineering, and research teams on implementing governance programs designed to comply with the General Data Protection Regulation (GDPR), the Federal Trade Commission (FTC) Act, the California Consumer Privacy Act (CCPA), Colorado AI Act, EU AI Act, and other federal, state, and international privacy and ermerging AI frameworks
• Advising technology platforms on cutting edge technology issues, including facial recognition technologies, virtual and augmented reality, children’s safety, and data portability
• Advising life sciences companies on clinical trials, vendor management, data sharing for research and public interest purposes, and the acquisition and integration of target companies
• Implementing strategies to address international data transfer compliance
• Managing investigations relating to privacy, cybersecurity, and antitrust/competition, including inquiries by the FTC, European data protection authorities, and US state attorneys-general

Before joining Goodwin, Gabe worked for top-ranked law firms in London, UK, and Washington, DC He also served as a Westin Fellow at the International Association of Privacy Professionals.

Gabe is a Certified Information Privacy Professional (CIPP/US).

Gabe’s recent publications and speaking engagements include:

• Panelist, “The EU AI Act: Everything MedTech and Healthcare Organizations Need to Know About New, Expansive Compliance Obligations,” ACI Healthcare AI Summit, February 27, 2026
• Panelist, “Navigating the Evolving Landscape of Anonymization and Privacy Enhancing Technologies (PETs),” IAPP Europe Data Protection Congress, November 18, 2025
• Presenter, “EU AI Act Comprehensive,” IAPP AI Governance Global, September 17, 2025
• Presenter, “Privacy vs. Research,” Future of Privacy Forum, August 22, 2024
• Panelist, “Emerging Best Practices in Health Care Technology and Marketing: Changing Tides,” IAPP Global Privacy Summit, April 3, 2024
• Co-Author, “Anonymisation Through Separation: What Recent Cases Teach us About the EU’s Anonymisation Standards,” Privacy & Data Protection, January/February 2024
• Panelist, “Immersive Tech Panel Series: Advertising,” Future of Privacy Forum, August 22, 2023
• Co-Author, “The Sephora Case: Do Not Sell – But Are You Selling?,” International Association of Privacy Professionals, 2022
• Interviewee, “What’s the Deal with Data Portability? Understanding the Competition and Privacy Aspects Surrounding the Movement of Data,” Our Curious Amalgam (ABA Podcast), November 30, 2020
• “New Data Privacy Frontiers: India’s Draft Personal Data Protection Bill,” American Bar Association, June 19, 2020
• “Friends or Foes? The Public’s Battle with Data, Privacy, and the Internet: The 2020 JOSTL & PILJ Symposium,” Boston University Law School Symposium, Boston, February 8, 2020
• Co-Author, “Born in the USA: The GDPR and the Case for Transatlantic Privacy Convergence,” Colorado Tech. L. J., 2019
• Co-Author, “The Costs of Not Using Data: Balancing Privacy and the Perils of Inaction,” George Mason University J. of L., Econ. & Pol’y, 2019
• Co-Author, “‘Essential Equivalence’ and European Adequacy After Schrems: the Canadian Example,” 34 Wis. Int’l L.J., 2017 
• Author, “How the GDPR changes the rules for research,” IAPP Privacy Advisor, April 19, 2016
• Co-Author, “Top 10 Operational Impacts of GDPR,” IAPP Privacy Advisor, December 2016