Responsibilities
- Provide guidance to internal teams on adherence to U.S. federal and state privacy regulations such as CCPA/CPRA, HIPAA, and GLBA, as well as international standards including GDPR and UK GDPR, particularly as they apply to health-related data and life sciences services
- Prepare, evaluate, and negotiate agreements involving data privacy, including data processing addenda, vendor contracts, customer agreements, business associate agreements, and international data transfer mechanisms
- Create and maintain privacy policies, data notices, consent frameworks, and internal governance structures suited to a life sciences services setting
- Support internal teams during data incident responses by assessing risks, managing escalations, determining breach notifications, and coordinating regulatory reporting
- Perform privacy impact assessments and data protection evaluations for new initiatives, products, systems, and data processing activities
- Track evolving privacy legislation and inform stakeholders about emerging legal trends, enforcement actions, and technological developments affecting operations
- Work with IT, security, compliance, marketing, product, operations, and research teams to integrate privacy considerations into daily business functions
- Deliver practical, risk-informed legal counsel on handling personal and health data, including collection, use, sharing, retention, and de-identification practices
- Promote diversity, equity, and inclusion by demonstrating inclusive behaviors, engaging in ongoing learning, and addressing bias proactively
- Perform additional duties as assigned by management
Reasonable Accommodation
In accordance with the ADA and applicable state and local laws, the company provides reasonable accommodation for employees with disabilities, provided it does not cause undue hardship. Employees needing accommodations to perform essential job functions should contact Human Resources.
