Managing Associate General Counsel
Job description
About the role
Abridge is seeking a highly experienced privacy counsel to take a leadership role within its legal team, focusing on privacy and data governance. This position is vital for guiding the company's innovative AI-driven healthcare platform through the complex and evolving landscape of privacy laws and regulations. You will serve as a key advisor to senior leadership, providing strategic legal counsel on privacy matters, and collaborating closely with product, security, engineering, and compliance teams to ensure the company's offerings meet all relevant legal standards. Your expertise will help foster responsible innovation while maintaining rigorous privacy protections, supporting the company's growth and trustworthiness in the healthcare technology sector.
Key facts
What you'll do
- Lead and oversee the company's privacy program, developing strategies and policies to ensure compliance with applicable privacy laws and regulations.
- Provide day-to-day legal guidance to product, security, engineering, and other teams on privacy issues related to AI, machine learning, clinical data, and sensitive information handling.
- Develop, implement, and continuously improve privacy policies, notices, and procedures aligned with HIPAA, CCPA/CPRA, biometric privacy laws, and other US state privacy frameworks.
- Collaborate with commercial and legal teams to address data sharing, data governance, and contractual privacy obligations, including drafting and negotiating privacy-related provisions in agreements.
- Manage communications and disclosures with government agencies, regulators, and other external stakeholders regarding privacy compliance and investigations.
- Monitor and interpret changes in privacy, cybersecurity, healthcare, and AI regulations, translating these updates into actionable legal recommendations for the company.
- Assist in maintaining and updating privacy and security policies, notices, and related documentation to reflect current legal standards and best practices.
- Create and maintain privacy-related training materials, templates, and playbooks to promote consistent understanding and application of privacy policies across teams.
- Support internal audits and assessments to verify compliance with privacy laws and internal policies.
- Provide legal support for incident response and data breach investigations, ensuring timely and compliant disclosures when necessary.
- Advise on the legal implications of new product features and innovations, ensuring privacy considerations are integrated into product development lifecycle.
- Engage with external counsel and industry groups to stay informed on emerging privacy issues and best practices.
- Contribute to the company's overall legal strategy related to privacy, data security, and regulatory compliance, aligning with business objectives.
- Support the company's efforts to build a privacy-conscious culture through training, awareness, and leadership.
Requirements
- Over 15 years of legal experience, with a significant portion in-house, in health tech, or at technology-focused law firms.
- Proven track record of leading, developing, advising, and evaluating privacy and data security programs for technology products, especially in healthcare or AI contexts.
- Deep understanding of HIPAA, healthcare privacy standards, CCPA/CPRA, biometric privacy laws, and US state privacy and data security frameworks.
- Demonstrated ability to lead and manage a team of legal professionals, providing mentorship and strategic direction.
- Practical, risk-based approach to legal issues, with the ability to balance regulatory compliance, business needs, and customer trust.
- Strong business judgment and the capacity to work independently in a fast-paced, dynamic environment.
- Excellent written and verbal communication skills, with the ability to translate complex legal requirements into clear, actionable guidance for technical and non-technical teams.
- Strong organizational skills to manage multiple high-priority projects simultaneously, with attention to detail.
- Juris Doctor degree from an accredited law school.
- Active membership in good standing with at least one U.S. state bar.
Nice to have
- Prior experience working in healthcare or health technology sectors, understanding the unique privacy challenges in these fields.
- Familiarity with current trends and issues at the intersection of privacy regulations and artificial intelligence, including ethical considerations.
- Experience working with government agencies or regulators on privacy compliance matters.
- Knowledge of international privacy laws, such as GDPR, is a plus but not required.
- Experience in drafting and negotiating complex privacy and data security agreements.
- Understanding of emerging privacy-enhancing technologies and practices.
Skills & tools
- HIPAA
- CCPA/CPRA
- Biometric privacy laws
- US state privacy and data security frameworks
Practical notes
This is a hybrid role requiring three days per week in either the San Francisco or New York office (Monday, Wednesday, Friday). The position offers a comprehensive benefits package, including 14 paid holidays, flexible paid time off, and a variety of health plans covering medical, dental, and vision. The company provides HSA contributions, paid parental leave, and family forming benefits to support work-life balance. Employees are also eligible for a 401(k) plan with matching contributions, a personal device allowance, and pre-tax benefits such as FSA and commuter benefits. The company emphasizes mental health support and offers a sabbatical leave after five years of service. Compensation is competitive and includes equity options, aligning with the company's growth and success. The role requires close collaboration with internal teams and external partners, fostering a privacy-conscious culture across the organization.
About the company
Abridge is a village in Essex, England. It is on the River Roding, 16 miles (26 km) southwest of the county town of Chelmsford. The village is in the district of Epping Forest and in the parliamentary constituency of Brentwood and Ongar.