Healthcare Data Privacy Associate Attorney

3-8 yrs required

Full-time

No

A law firm is seeking a highly qualified Healthcare Data Privacy Associate Attorney to join its global Data Privacy, Cybersecurity, and Digital Assets Practice Group. The candidate will be responsible for advising clients on various digital healthcare privacy, data protection, cybersecurity, and compliance matters while also playing a key role in projects and client interactions.

Duties:

• Assist and advise clients on digital healthcare privacy, data privacy, cybersecurity, and digital assets counseling and transactions.
• Lead or significantly contribute to global compliance strategies on privacy, data protection, international data transfers, and cybersecurity.
• Conducted compliance gap assessments, implemented remediation plans, and drafted policies and procedures (privacy policies, privacy statements, incident response plans, vendor contracting templates, and DPAs).
• Provide guidance on contract and M&A negotiations.
• Assist clients in determining compliance risks and priorities, and implementing data protection compliance and information governance programs.

Requirements:

• . degree or equivalent.
• Admission to practice and in good standing in any . state where a firm office resides.
• 4+ years of experience with meaningful knowledge of healthcare industry data privacy and security issues, including info blocking.
• Incident response experience is desirable.
• Healthcare industry experience is necessary.
• Digital healthcare and privacy experience are strongly preferred.

Certifications:

Certified Information Privacy Professionals (CIPP-US, CIPP-EU, and CIPM) are strongly preferred.

Experience:

4+ years of relevant experience in healthcare industry data privacy and security issues, with a focus on joining the . team of the global Data Privacy, Cybersecurity, and Digital Assets Practice Group.

Skills:

• Industry experience and/or experience drafting privacy and security policies and procedures for compliance with relevant regulations.
• Working understanding of international, federal, state, and local privacy and security laws and technologies.
• Familiarity with FDA, FTC, State AG guidance, best practices, and enforcement, as well as GLBA, HIPAA, HITECH Act, CAN-SPAM, TCPA, COPPA, FCRA, FERPA, VPPA, Cable Act, Privacy Act, Cal-OPPA, Shine the Light, state breach notification and security laws, US-EU and US-Swiss Privacy Shield, and state consumer privacy laws (CCPA/CPRA/CDPA/CPA).

Legal