Joy S. Easterwood

Attorney

Joy Easterwood is a member of the Health Care Team at Johnson Pope Bokor Ruppel & Burns LLP, where she advises clients on health care law, privacy, and technology. Drawing on her experience as in-house Counsel and Privacy Officer in both provider and payor settings—including her role as Counsel & Privacy Officer at Johns Hopkins All Children’s Hospital—Joy brings a practical, operational perspective to complex regulatory challenges.

Her practice spans data privacy and security, digital health innovation, clinical research, health technology agreements, and regulatory compliance counseling. Joy negotiates critical agreements for clients and works with health care providers, research institutions, and health tech companies to design and implement compliance frameworks that meet federal and state regulatory requirements without sacrificing operational efficiency or business goals. She regularly counsels clients on HIPAA, state health care and privacy laws, licensure and credentialing, fraud and abuse laws, and data governance issues.

Joy focuses her practice on negotiating sophisticated technology and clinical research agreements, including BAAs, data use arrangements, and vendor contracts that support innovative care delivery models. Known for her ability to translate complex rules into actionable guidance, she also assists clients in high-stakes situations such as government investigations, regulatory audits, and breach response. In addition, she develops tailored privacy programs, governance structures, training initiatives, and contract frameworks to mitigate risk and safeguard sensitive information.

Joy is passionate about advancing education in health law and compliance. She previously served as an Adjunct Professor at Stetson University College of Law and recently joined the University of South Florida’s Executive MBA program as an Adjunct Professor, teaching health care law to emerging business leaders. She is also a frequent speaker and author on emerging issues in privacy, cybersecurity, and health care regulation.

Representative Matters

• HIPAA Compliance Audits and Remediation: Led HIPAA compliance audits and implemented remediation plans for hospitals, specialty practices, and health IT companies.

• Research Compliance: Advised health care providers and research institutions on requirements for the use of patient information in clinical research and successfully negotiated clinical trial agreements to align with applicable health care laws.

• Enterprise Privacy and Security Programs: Drafted comprehensive privacy, security, and compliance programs for multi-entity health providers undergoing digital modernization and EHR integration. Provided workforce training aligned with privacy and security program requirements.

• Healthcare Technology Contracts: Negotiated technology contracts for health care providers, including agreements involving artificial intelligence, mobile applications, and electronic record systems.

Bar Admissions

• Florida, 2009
• South Carolina, 2008

Education

• Stetson University College of Law, J.D., 2008
• Florida State University, B.S. in Communication Studies & Psychology, cum laude, 2005

Community & Professional Organizations

• The Florida Bar
  • Member, 2009 – Present
• The South Carolina Bar
  • Member, 2008 – Present
• University of South Florida, Executive MBA Program
  • Adjunct Professor, 2025 – Present
• Stetson University College of Law
  • Adjunct Professor, 2019 – 2020

Outside the Office

Outside of her legal practice, Joy enjoys spending time on the water, traveling with her family, and cheering on her three children at their many sporting events. Whether it’s boating on the weekends, running for fun, or exploring new destinations with the family like Banff or Rome, Joy makes the most of family time and adventure.