Overview
A leading provider of evidence-based mental health care is seeking a Privacy Attorney to join their growing US Privacy legal team. This full-time remote role supports internal stakeholders in delivering mental and emotional health solutions to large employers across the US and globally. The position reports to the Sr. Director, Associate General Counsel - Global Privacy and collaborates closely with US and UK privacy and data protection professionals.
Responsibilities
- Support the privacy program and advise internal teams on privacy issues related to products, services, and new technologies such as AI.
- Lead and participate extensively in AI use case reviews, including generative AI and agentic AI, for internal use and AI-powered products and services.
- Draft, maintain, and update AI governance documentation, including Responsible AI Policy, standards, procedures, and guidance.
- Ensure compliance with applicable state and federal privacy laws such as CCPA and HIPAA.
- Monitor and advise on evolving US privacy and AI laws and regulations at state and federal levels.
- Support international AI regulatory compliance efforts, including the EU AI Act, by collaborating with international privacy counsel.
- Work with commercial counsel to ensure privacy provisions in commercial agreements and Business Associate Agreements (BAAs) manage risk and comply with policies and laws.
- Review BAAs and document data use permissions for customers.
- Advise product and business teams on privacy and AI regulatory implications of new and existing products, including reviewing product requirement documents.
- Investigate, manage, document, and report privacy incidents and breaches in accordance with legal and contractual requirements.
- Participate in cross-functional AI governance and use case review teams.
- Perform other duties as assigned.
Qualifications
- Law degree from a top-tier law school and membership in good standing of a state bar.
- 3 to 5 years of legal experience in-house or at a law firm.
- Experience advising on healthcare privacy laws at state and federal levels; experience with CCPA or GDPR programs and AI regulation/governance is a plus.
- Strong problem-solving, judgment, communication, and interpersonal skills.
- Experience leading projects and collaborating with diverse stakeholders.
- Ability to balance technical AI legal advice with operational process management.
- Experience working in-house at a technology company and/or healthcare organization preferred.
- Ability to manage multiple competing priorities effectively in a high-performance environment.
Preferred Qualifications
- Strong background in Data Privacy with significant hands-on AI experience.
- AI-related professional certification (e.g., IAPP Artificial Intelligence Governance Professional) or equivalent study.
- Privacy-related professional certification (e.g., IAPP CIPP/US).
- Familiarity with new US state AI regulations, including California, Colorado, Texas, Illinois, New York (including NYC), and Utah.
- Ability to think quickly, manage shifting priorities, and maintain composure under pressure.
- Ability to work autonomously and collaboratively, exercising good judgment on issue escalation.
- Positive attitude and sense of humor.
Compensation & Benefits
Details regarding compensation and benefits are not provided in the job description.
Location
This is a full-time remote position based in the United States. Candidates must be authorized to work in the US and able to collaborate across US time zones.