Assistant General Counsel - IT & Privacy

The University of Kansas Health System•Kansas City, KS

About The Position

The Assistant General Counsel – IT & Privacy provides strategic and operational legal support for information technology, data governance, privacy, and digital innovation initiatives across a complex healthcare enterprise. The role advises executive leadership and enterprise teams on technology-enabled transformation, helping ensure compliance with applicable laws while enabling responsible innovation, operational efficiency, and mission-aligned growth. The position applies seasoned attorney skills to a specialized IT and privacy practice, with an emphasis on negotiating complex technology contracts and transactions, data governance, artificial intelligence, digital health, research enablement, and regulatory risk management. The Assistant General Counsel joins an engaged legal team that operates independently and collaboratively under the leadership of the health system's Senior Vice President and General Counsel.

Requirements

Juris Doctor from an ABA-accredited law school.
10 or more years of experience in a law firm and/or in-house legal department.
Demonstrated experience negotiating complex, high-value technology and data-related agreements and transactions; advising on data use and privacy compliance; and mitigating regulatory risk in a complex organizational environment focused on technology optimization, discovery, and innovation.
Admission in good standing to the Kansas Bar, or admission in good standing to another state bar with eligibility for in-house registration in Kansas.
Strong analytical, negotiation, and drafting skills, with the ability to communicate complex legal concepts in practical terms.
Ability to work independently and manage multiple matters under tight deadlines in a fast-paced environment.
Demonstrated judgment in advising on novel or evolving legal issues.
Proficiency in Microsoft Office 365.

Nice To Haves

10 or more years of experience in healthcare law and intellectual property.
10 or more years of experience in healthcare, digital health, life sciences, or other highly regulated industries.
10 or more years of experience developing or advising on enterprise-wide governance frameworks, policies, or compliance programs.
Familiarity with artificial intelligence, data analytics, and emerging technology use in operational or research settings.
Combination of law firm and in-house legal experience.

Responsibilities

Provide legal counsel on enterprise IT initiatives, including cloud services, SaaS platforms, electronic health record integrations, digital health tools, telehealth solutions, mobile applications, and advanced analytics technologies.
Draft, review, and negotiate complex commercial technology agreements, including software licenses, SaaS and PaaS agreements, data use and data processing agreements, technology development agreements, and strategic vendor partnerships.
Advise IT, digital, and operational leaders on data rights, intellectual property strategy, cybersecurity, patient safety, operational risk, and regulatory compliance.
Support technology optimization to improve efficiency, consistency, and speed to execution while maintaining appropriate compliance and risk mitigation through policy and governance.
Advise on compliance with federal, state, and international privacy and data protection laws, including HIPAA, state consumer privacy laws, and cross-border data transfer requirements.
Support development, implementation, and maintenance of enterprise policies and standards governing data use, data sharing, de-identification, secondary use, and retention.
Partner with privacy, security, compliance, risk/claims, and operational teams to evaluate and respond to privacy incidents, security events, and regulatory reporting obligations.
Provide legal guidance on third-party data sharing, vendor risk management, and information governance structures.
Advise on legal and regulatory considerations related to artificial intelligence and emerging technologies, including ethical use, risk mitigation, transparency, and governance.
Support enterprise AI governance frameworks, including policy development, committee participation, and review of AI-enabled technology incidents or events.
Counsel business and clinical leaders on responsible deployment of AI technologies in operational, research, and patient-facing contexts.
Provide legal support for research, innovation, and commercialization initiatives, including compliance with human subject research requirements and data use restrictions.
Negotiate industry-sponsored and investigator-initiated clinical trial agreements, data licenses, material transfer agreements, and research collaboration agreements.
Advise on compliant data commercialization and monetization strategies, balancing innovation, regulatory obligations, and reputational risk considerations.
Identify, assess, and mitigate legal risks associated with technology, data use, privacy, and digital initiatives.
Support dispute resolution related to technology vendors, data partners, and digital initiatives, including negotiation, alternative dispute resolution, and management of outside counsel.
Monitor and interpret regulatory developments, enforcement activity, and industry trends affecting technology, privacy, AI, and digital health, and translate them into practical guidance for stakeholders.
Serve as a trusted advisor to executive leadership, IT leadership, compliance, privacy, research, and operational teams.
Lead or participate in cross-functional workgroups to develop policies, improve processes, and address enterprise-wide risk issues.
Mentor and support the professional development of legal team members on technology, privacy, and emerging technology matters.
Manage outside counsel relationships to ensure quality legal services, alignment with organizational objectives and outside counsel policies, and cost-effective service delivery.
Exhibit professional competencies and demonstrate commitment to the organization’s vision, mission, and core values.
Perform the professional, clinical, and/or technical competencies of the assigned unit or department; other duties may be assigned.