
Overview
Stephanie Gomes-Ganhão advises corporations and organizations across diverse industries on data privacy, cybersecurity, and technology matters. Building upon a background in healthcare and insurer privacy, she regularly counsels manufacturers, software companies, technology companies and financial institutions.
Addressing the full spectrum of data privacy and cybersecurity legal requirements, Stephanie counsels clients on the compliant operation of their business, launch of new products and services, data transfers, marketing goods and services, and contracting with customers and vendors. She advises on compliance with HIPAA/HITECH; Gramm-Leach-Bliley Act (GLB); EU General Data Protection (GDPR); New York Department of Financial Services (DFS) Cybersecurity Regulation; Children's Online Privacy Protection Act (COPPA); Federal Trade Commission Act (FTCA); biometric privacy laws; and state privacy laws, including those in California and Connecticut.
Stephanie has particular experience handling data breach matters, having counseled clients on dozens of ransomware, phishing and other cybersecurity incidents. Clients she has worked with range from Fortune 50 companies to public sector organizations from the healthcare, insurance, manufacturing and education sectors, where breaches affected hundreds of thousands of lives. Stephanie represents clients before state and federal agencies, including the U.S. Department of Health and Human Services and state attorneys general.
Stephanie assists clients with structuring, drafting and negotiating agreements and transactions that relate to technology and privacy, such as licenses, SaaS agreements, services agreements, data privacy agreements and addendums, terms of use agreements, and privacy policies, among other commercial agreements.
Stephanie served as a law clerk to the Honorable Dennis G. Eveleigh, Associate Justice of the Connecticut Supreme Court and as a legal intern for the Honorable Janet C. Hall, U.S. District Court for the District of Connecticut.
Stephanie is fluent in Portuguese.
Education and Credentials
Education
- Mount Holyoke College, B.A., magna cum laude, 2012
- Quinnipiac University School of Law, J.D., summa cum laude, 2015; Quinnipiac Law Review, Publication Editor
Admissions
- Commonwealth of Massachusetts
- State of Connecticut
Affiliations
- American Bar Association
- American Health Lawyers Association
- Certified Information Privacy Professional
- Connecticut Bar Association
- Hartford County Bar Association
- Health Care Compliance Association
- International Association of Privacy Professionals
- Massachusetts Bar Association
Languages
- Portuguese
Recognition and Community
No aspect of this advertisement has been approved by the highest court of any state. Prior results do not guarantee a similar outcome. See Awards Methodology.
Recognitions
Selected to the list of Ones to Watch for Health Care Law by The Best Lawyers in America (Woodward/White, Inc.), 2023-2025
Selected to the list of Connecticut Super Lawyers Rising Stars (Thomson Reuters), Health Care, 2017-2024
Recipient of the Dean's Fellow Scholarship, Quinnipiac University School of Law
Recipient of the CATIC Foundation Award
Community Involvement
Longmeadow Montessori Internationale, Board Member
Lawyers for Children America, Pro Bono Attorney
Center for Children's Advocacy, Pro Bono Attorney, 2018-2022
Hands on Hartford Volunteer, 2017-2019
Jewish Federation of Greater Hartford, Children's Reading Partners, 2018-2019
Fred D. Wish School Volunteer Tutor Program, 2016-2019
News & Insights
Thought Leadership
- Covered Entities and Business Associates: Are You in Compliance With the HIPAA Reproductive Healthcare Privacy Rule? , January 21, 2025
- A Review of Part 2: Consider a More Flexible Compliance Program in the Wake of the Revised Rules , May - June 2024
- Valuable OIG Compliance Advice for New Healthcare Entrants , May 2024
- Policy Changes Required Under New HIPAA Reproductive Health Rule , May 10, 2024
- Certain ASCs Face New Prior Authorization Payment Requirements from CMS , April 29, 2024
Events
- Champions for Children: Celebrating 30 years of Protecting Children and Partnering for Change, Lawyers for Children America, November 7, 2024
- Stephanie Gomes-Ganhão Attends the IAPP Global Privacy Summit, April 4-5, 2023
News
- Day Pitney Receives 2023 Connecticut Law Firm Award from Lawyers for Children America, September 15, 2023
In The Media
Publications
- Building TRUST in Our Communities: States Encourage Their Residents to Speak Up in the Wake of the Federal Government's Silence, 33 Quinnipiac L. Rev. 716, May 31, 2022
- IRS 'Rolls Over' Where Beneficiary Designation Overlooked: Surviving Spouse Receives Taxpayer-Friendly Ruling in IRA Case, Trusts & Estates Magazine, May 12, 2016
Media Mentions
- What Is Information Blocking Compliance in Healthcare and Why Is It Prevalent?, Medical Technology Schools, October 2, 2023