Healthcare Data Privacy Associate Attorney

3-8 yrs required

Full-time

No

A law firm is currently seeking a qualified Healthcare Data Privacy Associate Attorney for their New York City office. The ideal candidate will play a crucial role in the global Data Privacy, Cybersecurity, and Digital Assets Practice Group, providing expert legal counsel on digital healthcare privacy, data privacy, and cybersecurity matters. Provide legal counsel on digital healthcare privacy, data privacy, cybersecurity, and digital assets counseling and transactions. Advise clients on global compliance strategies related to privacy, data protection, international data transfers, and cybersecurity.

Collaborate with partners globally, taking a lead role in projects and direct client interaction. Conducted compliance gap assessments, implemented remediation plans, and drafted various policies and procedures. Offer guidance on contract and M&A negotiations. Assist clients in determining compliance risks and priorities, implementing data protection compliance, and managing information governance programs.

Duties:

• Work directly with partners worldwide, leading or assuming significant responsibility for projects.
• Interface directly with clients to provide legal counsel and support.
• Conduct compliance gap assessments and implement remediation plans.
• Draft policies and procedures, including privacy policies, privacy statements, incident response plans, and vendor contracting templates.
• Advise on contract and M&A negotiations.
• Assist clients in determining compliance risks and priorities.
• Implement data protection compliance and information governance programs.

Requirements:

• . degree or equivalent.
• Admission to practice and in good standing in any . state.
• 4+ years of relevant experience, with a focus on healthcare industry data privacy and security issues.
• Incident response experience desirable.
• Digital healthcare and privacy experience strongly preferred.

Certifications:

• Certified Information Privacy Professional (CIPP) strongly preferred.
• Certifications: CIPP-US, CIPP-EU, and CIPM preferred.

Skills:

• Strong understanding of international, federal, state, and local privacy and security laws.
• Familiarity with technologies supporting compliance.
• Industry experience in compliance with FDA, FTC, State AG guidance, and various privacy laws.
• Knowledge of GLBA, HIPAA, HITECH Act, CAN-SPAM, TCPA, COPPA, FCRA, FERPA, VPPA, Cable Act, Privacy Act, Cal-OPPA, Shine the Light, state breach notification and security laws, US-EU, and US-Swiss Privacy Shield, and state consumer privacy laws (CCPA/CPRA/CDPA/CPA).

Legal