Privacy Counsel

Advise internal business teams on compliance with U.S. federal and state privacy laws (e.g., CCPA/CPRA, HIPAA, GLBA) and international frameworks (e.g., GDPR, UK GDPR), with a particular focus on laws and guidance relevant to health science services and sensitive health-related information. Draft, review, and negotiate privacy-related agreements, including data processing addenda, vendor agreements, customer agreements, business associate agreements, and cross-border data transfer arrangements. Develop and implement privacy policies, notices, consent management strategies, and internal governance frameworks tailored to a health science services environment. Guide internal stakeholders through incident response, including breach notification requirements, escalation procedures, risk assessments, and regulatory reporting. Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) for new products, services, systems, and data uses. Monitor legislative developments and advise on emerging privacy trends, technologies, and enforcement actions affecting the company's operations. Collaborate closely with cross-functional teams—including IT, security, compliance, marketing, product, operations, and research-focused teams—to embed privacy into business operations. Provide practical, risk-based legal advice to internal clients on the collection, use, sharing, retention, and de-identification of personal and health-related information. Demonstrate a commitment to diversity, equity, and inclusion through continuous development, modeling inclusive behaviors, and proactively managing bias.