Legal Counsel

SimplePractice

4d•$185,000 - $235,000

About The Position

At SimplePractice, we are improving access to quality care by equipping health and wellness clinicians with all the tools they need to thrive in private practice. More than 250,000 providers trust SimplePractice to build their business through our industry-leading software with powerful tools that simplify every part of practice management. From admin work to clinical care, our suite of innovative solutions work together to reduce administrative burden—empowering solo and small group practitioners to thrive alongside their clients. Award-winning and people-first, SimplePractice is shaping the future of health tech. Recognized by MedTech Breakthrough, the Digital Health Awards, and BuiltIn's Best Places to Work. We're looking for a Legal Counsel to join our Legal team and serve as a trusted advisor across product development, privacy, regulatory compliance, and commercial contracting. You'll work closely with product, engineering, marketing, and business teams to help SimplePractice grow responsibly while staying true to our mission of supporting independent mental health practitioners and their clients. This role touches every part of the business. You'll shape how we build products, protect client data, evaluate new partnerships, and respond to a rapidly evolving regulatory environment, particularly around AI in mental healthcare and digital health privacy. If you want high-impact, cross-functional legal work at a company whose mission matters, this is it.

Requirements

J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar (California bar membership or eligibility preferred)
7-8+ years of legal experience, with meaningful exposure to healthcare privacy (HIPAA), technology transactions, or SaaS/digital health product counseling; a combination of law firm and in-house experience is ideal
Working knowledge of HIPAA, including the Privacy Rule, Security Rule, and Breach Notification Rule
Experience drafting and negotiating technology agreements (SaaS, licensing, vendor, and data processing agreements)
Ability to translate legal and regulatory requirements into clear, practical guidance for non-legal stakeholders
Strong judgment and comfort operating independently in a fast-paced environment with competing priorities

Nice To Haves

CIPP/US or other privacy certification
Experience with HIPAA and healthcare privacy laws
Experience advising on AI/ML products in a regulated industry, including familiarity with emerging AI governance frameworks
Experience with state consumer health data privacy laws (Washington MHMD Act, Connecticut, Nevada, and similar)
Experience building legal processes, templates, and resources from the ground up

Responsibilities

Serve as a legal advisor to product and engineering teams, providing guidance on new features, product launches, and platform changes
Conduct regulatory impact assessments for new product initiatives, with a particular focus on responsible AI use in healthcare technology
Monitor and analyze emerging SaaS, AI, and digital health regulations that affect SimplePractice's platform and the mental health technology space more broadly
Review marketing materials, website content, and promotional assets to confirm alignment with healthcare advertising regulations, FTC guidelines, and platform-specific requirements
Conduct impact assessments for new and existing product features, with a primary focus on HIPAA (Privacy Rule, Security Rule, and Breach Notification Rule)
Advise on data collection, use, storage, and sharing practices across the platform, including the EHR and client portal
Support incident response processes and breach notification obligations
Stay current on federal and state privacy developments (including state health data laws, CCPA/CPRA, and sector-specific requirements) and translate regulatory changes into actionable guidance for cross-functional teams
Collaborate with Compliance, Security, Data, and Engineering teams on data protection practices and compliance documentation
Draft, review, and negotiate a range of commercial agreements, including customer contracts, SaaS subscription agreements, BAAs, vendor contracts, partnership agreements, and data processing agreements
Evaluate potential business partners and vendors through legal review
Manage contract lifecycle processes and maintain accessible records of key agreements
Draft, update, and maintain SimplePractice's privacy policies, terms of service, acceptable use policies, and related user-facing legal documents
Develop internal policies, playbooks, and training materials on privacy, data handling, AI governance, and regulatory compliance
Build scalable legal processes and templates that help the business move quickly without sacrificing compliance