Counsel I, Data Privacy

Job Responsibilities

• Provide practical, business-oriented legal advice on data privacy and data protection matters, including regional and state privacy laws and emerging legislative and regulatory developments that may impact the Company’s operations.
• Support regional privacy compliance activities, including required notifications, filings and engagement with regulatory authorities, as needed.
• Advise on privacy aspects relating to employment and recruitment and HR-related privacy notices.
• Draft, review and maintain privacy notices, data processing agreements, data sharing agreements, HIPAA business associate agreements and other privacy documentation supporting the Company’s processing of personal data.
• Collaborate with internal stakeholders to draft, review and negotiate privacy-related contract terms with customers, vendors and other third parties.
• Advise on marketing, promotional and outreach activities.
• Contribute to the development, implementation and maintenance of Company privacy policies, procedures, processes and training materials.
• Support privacy operational activities, including data subject rights requests, complaints, privacy-by-design reviews, data mapping and mitigation strategies for key business initiatives.
• Support privacy incident response activities, including investigation, assessment, required notifications, remediation support and coordination with the Company’s incident response team.
• Participate in client and vendor meetings, customer audits and regulatory inspections for support related to data privacy.
• Work collaboratively across the Office of the General Counsel, including regional legal teams, to build consensus, improve processes and drive legal projects to completion.
• Support privacy reviews of new technologies and business initiatives, including artificial intelligence, digital health solutions, and other technologies involving personal data.
• Perform other duties as assigned.
• Minimal travel may be required, up to 15%.

Qualifications

• JD/LLM/LLB or an equivalent degree from an accredited university
• Fully qualified lawyer
• Industry certifications e.g. CIPP/US, CIPT, CIPM, AIGP (or equivalent)

Additional Qualifications

• Proven experience in a multinational company or law firm
• Strong knowledge and experience in application of privacy law
• Strong knowledge of contracts and commercial laws in assigned region/country
• Ability to collaborate with colleagues and take a business-oriented approach while identifying and balancing legal risks and providing succinct, accurate and pragmatic advice
• Ability to work independently while being able to contribute successfully to cross-functional teams
• Outstanding relationship-building skills
• Exceptional analytical skills, independent judgment, a desire to learn, and an ability to take on and prioritize a wide variety of complex matters
• Can-do attitude, able to work under pressure, manage tight deadlines and a high volume of competing priorities

Critical Skills

Significant experience advising on US federal and state privacy and digital marketing law, preferably within the pharmaceutical, healthcare or life-sciences sector, including HIPAA/HITECH, FTC Act and FTC health-privacy requirements, CAN-SPAM, TCPA/FCC requirements, DOJ Final Rule, CCPA/CPRA and other US state comprehensive and consumer health-data privacy and breach notification laws. Experience advising on FDA-regulated programs, including REMS, is strongly preferred.