Overview
This role is a high-impact legal position focused on privacy, artificial intelligence (AI), and digital health innovation within a fast-scaling consumer healthcare platform. The Counsel, Privacy & AI will provide strategic legal counseling and hands-on program development to ensure privacy-by-design principles are integrated into product lifecycles. The position requires collaboration with product, engineering, marketing, security, and compliance teams to translate complex regulatory requirements into clear, actionable guidance.
Responsibilities
- Serve as a key legal advisor and strategic partner, integrating privacy and AI considerations into product development, business operations, and regulatory compliance globally.
- Act as a subject matter expert on privacy, data protection, and AI regulations, advising cross-functional teams including product, engineering, marketing, and operations.
- Lead legal review of AI-driven features, digital products, and data use cases, ensuring privacy-by-design principles are embedded throughout development cycles.
- Provide practical legal guidance on complex data processing and AI initiatives, translating regulatory requirements into clear business actions.
- Develop, maintain, and enhance internal privacy and AI governance frameworks, including policies, playbooks, and best practices for responsible data use.
- Conduct and oversee privacy and AI risk assessments, including Data Protection Impact Assessments (DPIAs) and related compliance documentation.
- Monitor global regulatory developments in privacy and AI law, translating updates into actionable internal guidance and policy changes.
- Collaborate with public policy and legislative teams to evaluate emerging regulations and support external advocacy efforts.
- Support incident response for privacy and AI-related issues, guiding cross-functional teams from detection through mitigation and resolution.
- Partner with procurement and business teams to negotiate and review privacy and AI-related agreements, including Data Processing Agreements (DPAs) and Business Associate Agreements (BAAs).
- Drive continuous improvement of privacy and AI programs as the organization scales and adopts new technologies.
Requirements
- Juris Doctor (J.D.) from an ABA-accredited law school and active bar membership in at least one U.S. jurisdiction.
- Minimum of 5 years of legal experience advising on privacy, data protection, and AI-related matters, either in-house or at a top-tier law firm.
- Strong expertise in U.S. and international privacy laws, consumer health data regulations, and emerging AI governance frameworks.
- Proven experience supporting product, engineering, and marketing teams in integrating legal requirements into product design and execution.
- Experience negotiating privacy and data-related agreements, including DPAs, BAAs, and cross-border data transfer arrangements.
- Ability to translate complex legal concepts into clear, actionable guidance for non-legal stakeholders.
- Experience conducting DPIAs, AI risk assessments, and managing data governance frameworks.
- Comfortable operating in a fast-paced, evolving regulatory and product environment with shifting priorities.
- Prior experience in healthcare, digital health, telehealth, or consumer technology environments is highly preferred.
- Certifications such as CIPP/US, CIPP/E, or equivalent are a strong plus.
Compensation & Benefits
- Competitive salary with equity compensation for eligible roles.
- Unlimited paid time off (PTO), company holidays, and quarterly mental health days.
- Comprehensive medical, dental, and vision insurance coverage.
- Paid parental leave and family support benefits.
- 401(k) retirement plan with employer matching contributions.
- Employee Stock Purchase Program (ESPP).
- Flexible, remote-first work culture.
- Regular offsite team gatherings and retreats.
- Strong focus on mental health resources and employee wellness initiatives.
- Learning and development support for continued professional growth.
Location
- United States-based position.