Data Privacy Compliance Specialist

DeepHealth

15h•Remote

About The Position

The Data Privacy Compliance Specialist supports DeepHealth’s global data privacy programs, including HIPAA and GDPR. Reporting to the Data Privacy Compliance Lead, this role collaborates across the organization to help ensure personal data is collected, processed, and stored in accordance with applicable privacy laws and DeepHealth requirements. The position supports privacy initiatives across product development, vendor management, regulatory research, and cross-functional risk management. It also contributes to privacy-related investigations, responds to inquiries as a backup contact, maintains documentation, and supports audit and regulatory readiness. This is a remote-friendly, office-based role in the European Union, with travel of up to approximately 10%.

Requirements

Bachelor’s degree in a relevant field or equivalent practical experience.
At least 2 years of experience in a regulated industry.
Strong knowledge of GDPR and HIPAA.
Excellent written and oral communication skills.
Ability to perform the essential duties and responsibilities of the position, with or without reasonable accommodation.

Nice To Haves

Medical device experience.
Software and/or Software as a Medical Device experience.
Experience supporting privacy assessments, Data Processing Agreements, or Privacy by Design activities.

Responsibilities

Support organizational data privacy efforts and compliance with applicable local, national, and global privacy laws and regulations.
Assist with the Privacy by Design program for product development and modification, including software and AI use cases.
Collaborate with Vendor Management on vendor qualification and implementation of Data Processing Agreements and Transfer Impact Assessments, as applicable.
Research and review country-specific data privacy frameworks and regulations to support continued compliance and business opportunities.
Collaborate cross-functionally to implement technical and organizational measures that support data privacy.
Monitor how personal data is collected, processed, and stored for compliance with applicable laws.
Participate in investigations and impact assessments related to information security events with privacy implications.
Serve as a backup point of contact for data protection authorities and data subjects, handling inquiries and requests.
Collaborate cross-functionally to improve data privacy processes in support of risk management frameworks such as GDPR and HIPAA.
Maintain clear documentation of privacy activities and support audit and regulatory readiness as assigned.
Follow DeepHealth policies and procedures, applicable laws, and data privacy, compliance, safety, and confidentiality standards.
Complete job responsibilities in a quality and timely manner and maintain satisfactory attendance.