Overview
A healthcare technology organization is seeking a Product Counsel to serve as a trusted legal partner for the Product and Engineering teams. This role involves providing legal guidance throughout the entire product lifecycle, from early design through launch, with a focus on privacy-by-design and compliance with healthcare and consumer privacy laws. The position is remote with occasional travel to the headquarters in Redwood City, California.
Responsibilities
- Act as the primary legal advisor to Product and Engineering teams, identifying and addressing legal risks early in the product development process.
- Advise on privacy-by-design principles, including data flows, collection, use, and protection of Protected Health Information (PHI) and other sensitive data.
- Ensure compliance with HIPAA/HITECH, state consumer health privacy laws (e.g., Washington's My Health My Data Act), CCPA/CPRA, and other applicable U.S. privacy and security regulations.
- Lead privacy assessments for new features and services, including those powered by AI, and translate findings into actionable product requirements.
- Collaborate with Marketing on advertising claims, consumer protection, FTC considerations, and ad-tech practices.
- Draft, negotiate, and maintain user-facing legal documents such as terms of service, consents, privacy notices, and telehealth disclosures, updating them as products and regulations evolve.
- Advise on data-sharing arrangements and vendor/partner integrations involving product data, coordinating with commercial and compliance teams on Business Associate Agreements (BAAs), Data Processing Agreements (DPAs), and related terms.
- Develop templates, playbooks, and self-service guidance to support a rapidly scaling product organization without causing bottlenecks.
- Work cross-functionally with Security, Compliance, Operations, and Finance teams, escalating issues to the Chief Legal Officer and leadership as appropriate.
Requirements
- Juris Doctor (JD) degree from an accredited law school and active bar membership in good standing.
- 3-6 years of experience providing legal counsel to product and engineering teams on privacy and technology matters.
- Strong foundation in healthcare privacy and data protection laws, including HIPAA/HITECH and U.S. state privacy laws, preferably within healthcare, digital health, or other regulated environments.
- Proficiency in legal issues related to AI/ML, intellectual property, consumer protection, and advertising/marketing law.
- Ability to balance legal risk with business speed, providing clear and actionable advice.
- Excellent communication and cross-functional collaboration skills, capable of simplifying complex legal issues for product and engineering teams.
- Must be based in the United States.
Preferred Qualifications
- Privacy certification such as CIPP/US.
- Experience with health-data marketing and ad-tech.
- Familiarity with telehealth or marketplace business models.
Compensation & Benefits
Details regarding compensation and benefits were not provided.
Location
Remote position with occasional travel to Redwood City, California headquarters.