Director, Privacy Counsel
Core
Lead enterprise-wide privacy program for a digital health company, managing HIPAA compliance, privacy-by-design, risk assessments, and emerging tech governance.
Role type
Director, Privacy Counsel (Individual Contributor)
Builds
Enterprise privacy policies, incident response processes, and compliant data flows for digital health products.
Domain
Digital Health / Healthcare Regulatory Law
Required skills
HIPAA Privacy/Security/Breach Notification expertise, State consumer privacy law knowledge, Privacy-by-design implementation, Privacy risk assessment, Vendor due diligence, AI governance, Interoperability frameworks (Carequality, CommonWell, TEFCA), ERISA privacy, Clinical research privacy
Preferred skills
Digital health company experience, AI/ML privacy governance, HIE frameworks, ERISA/self-funded plan privacy, Privacy certifications (CIPP/US, CIPM, CHPS)
Technologies
HIPAA, CCPA/CPRA, WMHMDA, Carequality, CommonWell, TEFCA
Responsibilities
Manage HIPAA privacy program including policy development and breach response; Drive privacy-by-design in product development; Execute privacy risk assessments and vendor due diligence; Advise on consumer privacy and AI governance; Support health information exchange participation; Partner on ERISA and clinical research privacy; Design privacy training initiatives
Seniority
Director, Strategic Leadership & Cross-functional Partnership
