Overview
This role is for a Senior Counsel specializing in Regulatory & Compliance within the healthcare and digital health sector. The position involves providing legal guidance on healthcare regulatory, privacy, AI, product, and compliance matters related to the delivery of mental health and well-being services through a digital platform.
Responsibilities
Healthcare Regulatory & Product Counseling
- Provide practical, business-focused advice on healthcare regulatory issues including federal employer benefits regulations (e.g., ERISA, ACA market reforms), anti-kickback statutes, corporate practice of medicine, telehealth, professional licensure, and related state and federal laws.
- Counsel product, clinical, and operations teams on designing, building, and launching products and features in compliance with legal requirements and industry best practices.
- Manage and coordinate U.S. and international regulatory reviews for new offerings and market expansions, including working with outside counsel as needed.
- Monitor and analyze legislative and regulatory developments in digital health and healthcare delivery, advising on potential impacts.
Privacy & Data Governance
- Serve as legal advisor on healthcare privacy laws (e.g., HIPAA, state laws) and global privacy frameworks (e.g., GDPR, ePrivacy), supporting compliance with U.S. state privacy laws (e.g., CCPA/CPRA) and individual data rights.
- Collaborate with Engineering, Product, Security, Clinical, and Marketing teams to assess privacy and security risks related to products, vendors, and marketing activities.
- Support privacy-by-design initiatives including privacy impact assessments, data mapping, consent management, and user disclosures.
- Draft, review, and negotiate privacy and data terms in vendor, customer, and partnership agreements, including data protection addenda and business associate agreements.
- Develop and maintain privacy policies, procedures, FAQs, playbooks, and training materials.
AI Governance
- Draft and advise on legal frameworks for ethical and compliant use of AI and machine learning, including data governance for training datasets.
- Advise on legal and regulatory implications of AI/ML in mental health products, including potential medical device classification.
- Develop and implement internal policies for responsible AI focusing on mitigating bias, transparency, explainability, and fairness.
- Partner with Security, Product, Engineering, and Clinical teams to establish legal review and validation processes for AI/ML features.
- Monitor emerging AI legislation and regulations globally and assess their impact.
Compliance & Risk Management
- Support regulatory and compliance frameworks suitable for a fast-growing global health technology company.
- Assess and prioritize regulatory, privacy, and compliance risks; design and implement mitigation strategies.
- Support compliance certifications, audits, and internal reviews.
- Contribute to oversight of third-party suppliers, including issue escalation.
Cross-Functional Partnership & Leadership
- Act as a thought partner to senior leaders and stakeholders on digital health, regulatory, privacy, AI, and compliance strategy.
- Collaborate with Legal and Compliance teams to ensure consistent advice and alignment with company goals.
- Prepare reports and updates for executive leadership and the Board on regulatory and compliance risks and initiatives.
Requirements
- Approximately 8-10 years of combined experience in healthcare regulatory, privacy, product counseling, and/or compliance, preferably in healthcare or health technology companies, law firms, or government agencies.
- J.D. from a top-tier law school with strong academic credentials; admission to at least one U.S. state bar in good standing.
- Expertise advising on U.S. healthcare regulatory matters such as ERISA/ACA market reforms, anti-kickback laws, corporate practice restrictions, telehealth, and professional licensure.
- Familiarity with healthcare privacy laws (HIPAA and state laws) and major U.S. and global privacy frameworks (CCPA/CPRA, GDPR).
- Experience advising on digital health or technology products in regulated environments.
- Demonstrated experience with legal and policy issues related to AI/ML in regulated industries, including responsible AI principles and knowledge of emerging global AI regulations.
- Experience building or operationalizing compliance programs, including policies, training, investigations, audits, or certifications.
- Proven ability to collaborate effectively with technical and non-technical teams and senior leadership.
- Strong strategic, legal, and business judgment with the ability to provide practical advice under time pressure.
- Excellent written and oral communication, organizational, project management, analytical, and problem-solving skills.
- Collaborative, curious, low-ego mindset with strong integrity.
Preferred Qualifications
- Experience working in a fast-paced, dynamic environment with competing priorities.
- Interest in digital health and mental health services.
Compensation & Benefits
Compensation Ranges (Annual, USD)
- Zone 1 (San Francisco Bay Area, New York City Metro): $175,800–$206,800
- Zone 2 (Other California locations, Seattle, WA): $158,220–$186,120
- Zone 3 (Other New York locations, other Washington locations, Washington DC, Austin TX, CT, IL, MA, NH, NJ, OR, RI, VT): $158,220–$186,120
- Zone 4 (Other Texas locations, AL, AK, AZ, AR, CO, DE, FL, GA, HI, ID, IN, IA, KS, KY, LA, ME, MD, MI, MN, MS, MO, MT, NE, NV, NM, NC, ND, OH, OK, PA, SC, SD, TN, UT, VA, WV, WI, WY): $140,624–$165,440
Compensation depends on qualifications, skills, and experience and may fall outside these ranges. Full-time employees are eligible for equity programs and a comprehensive benefits package.
Benefits
- Medical, dental, vision, disability, and life insurance
- High Deductible Health Plan with Health Savings Account (HSA) option
- Flexible Spending Account (FSA)
- Access to coaching and therapy services through the platform
- Flexible time off and company-wide collective pause days
- Parental leave and family support benefits
- Professional development stipend
- 401(k) and financial planning benefits
- Annual wellness stipend
- New hire stipend for work-from-home setup
- Virtual community events and employee resource groups
- Monthly cell phone reimbursement
Location
This is a fully remote position. U.S.-based employees outside the Pacific Time Zone are expected to work at least six hours overlapping with 8 a.m. to 5 p.m. Pacific Time each workday.