Healthcare Data Privacy Associate Attorney

A law firm is seeking a Healthcare Data Privacy Associate Attorney to join its leading global Data Privacy, Cybersecurity, and Digital Assets Practice Group. The candidate will play a crucial role in advising clients on digital healthcare privacy, data protection, cybersecurity, and global compliance strategies. This position requires collaboration with partners worldwide, leading projects, conducting compliance assessments, and providing expert guidance on incident response and defense of regulatory actions.

Job Details:

• Assist and advise clients on digital healthcare privacy, data privacy, cybersecurity, and digital assets counseling and transactions.
• Develop global compliance strategies related to privacy, data protection, international data transfers, and cybersecurity.
• Work directly with partners worldwide, leading or assuming significant responsibility for projects, and directly interface with clients.
• Conduct compliance gap assessments and implement remediation plans.
• Draft policies and procedures, including privacy policies, privacy statements, incident response plans, vendor contracting templates, and DPAs.
• Advise on contract and M&A negotiations.
• Assist clients in determining compliance risks and priorities, implementing data protection compliance, and information governance programs.
• Prioritize healthcare industry experience.

Requirements:

• J.D. degree or equivalent.
• Admission to practice and in good standing in any U.S. state where a firm office resides.
• Incident response experience is desirable.
• Digital healthcare and privacy experience are strongly preferred.
• 4+ years of experience with meaningful knowledge of healthcare industry data privacy and security issues.
• Working understanding of international, federal, state, and local privacy and security laws.

Certifications:

• Certified Information Privacy Professionals are strongly preferred.
• Specific certifications: CIPP-US, CIPP-EU, and CIPM.

Skills:

• Strong knowledge of FDA, FTC, and State AG guidance, best practices, and enforcement (FIPPs).
• Familiarity with GLBA, HIPAA, HITECH Act, CAN-SPAM, TCPA, COPPA, FCRA, FERPA, VPPA, Cable Act, Privacy Act, Cal-OPPA, Shine the Light, state breach notification, and security laws.
• Understanding of US-EU and US-Swiss Privacy Shield and state consumer privacy laws (CCPA/CPRA/CDPA/CPA).
• Expertise in drafting privacy and security policies and procedures for compliance.
• Ability to navigate the intersection of technology and legal requirements to support compliance.