Mid-Level Associate for Health Care and General Privacy Counseling

Job Overview

A prominent law firm is seeking a skilled mid-level associate to join its nationally recognized Privacy & Cybersecurity practice. This position is ideal for an attorney with 4 to 7 years of experience in health care privacy and general privacy counseling. The associate will advise technology and life sciences clients on privacy implications related to digital product development, regulatory compliance, and information governance, including drafting privacy documentation and responding to data incidents.

Location

• Santa Monica, CA

Duties

• Provide strategic privacy advice during product and service development

• Draft and revise privacy policies, consent forms, disclosures, and related materials

• Counsel clients on compliance with health care privacy laws (federal and state)

• Advise on general consumer privacy and data protection regulations

• Draft and negotiate privacy and data-related contracts, including:

  • Business Associate Agreements (BAAs)

  • Data Processing Agreements (DPAs)

  • Data Use Agreements (DUAs)

• Conduct privacy risk assessments and audits

• Prepare breach notifications and counsel clients through incident response

• Assist in regulatory investigations and class-action litigation support

• Address adtech-related privacy issues (preferred but not required)

Requirements

• 4–7 years of legal experience in privacy and data protection law

• Deep understanding of health care and consumer privacy law frameworks

• Familiarity with data practices in digital health, tech, or life sciences

• Admission to the bar in California, or eligibility to sit for the bar exam

• Excellent writing, analytical, and interpersonal communication skills

• Strong academic credentials and references from legal employers or clients

Education

• Juris Doctor (J.D.) from an accredited law school

Certifications

• Active bar membership in California.

Skills

• Proficiency with major U.S. privacy laws, including:

  • HIPAA, CMIA, Washington My Health My Data Act, Nevada SB 370

  • GLBA, FCRA, COPPA, and FTC Act

• Strong command of state privacy laws, particularly the California Consumer Privacy Act (CCPA)

• Familiarity with international data protection laws, including the General Data Protection Regulation (GDPR)

• Ability to analyze data flow and manage complex privacy issues in tech-driven environments

• Competence in negotiating data-sharing and privacy-related agreements

• Experience advising on research data, clinical trials, or healthcare IT platforms is a plus

• Exposure to adtech-related privacy risks and regulations is advantageous

Benefits

• Comprehensive health insurance (medical, dental, vision)

• Life insurance and disability benefits

• Flexible Spending Accounts (FSA) and Health Savings Accounts (HSA)

• Wellbeing support and mental health resources

• Performance-based discretionary bonus eligibility