Legal Director

Dreem Health

About The Position

Dreem Health is America’s leading digital sleep clinic, powered by Sunrise’s technology. It simplifies sleep care by offering home-based testing, expert telehealth visits, and personalized treatment plans. Sunrise Group aims to make high-quality sleep care accessible to everyone, addressing the issue of slow, confusing, and uneven access to sleep disorder diagnosis and care. The company has developed a chin-based sleep test and a full sleep-health platform, delivering advanced diagnostic and treatment technology with clinical care directly to patients' homes through Dreem Health across all 50 U.S. states. With over 100 clinicians, engineers, and operators, and backed by more than $50M, Sunrise Group is focused on helping the 1+ billion people worldwide who lack access to necessary sleep care. This role offers an opportunity to help design and scale the legal and compliance infrastructure for Dreem Health's growth. It is a high-impact legal and compliance role for a digital health company operating at scale, serving as the primary in-house legal leader with broad responsibilities across regulatory strategy, healthcare compliance, corporate governance, payor contract review, certifications, risk management, AI and data governance, and legal enablement. The role is hands-on, requiring the ability to drive day-to-day legal and compliance work internally while effectively partnering with outside counsel for specialized areas.

Requirements

JD from an accredited law school and active U.S. bar admission.
7+ years of relevant legal experience, including in-house experience at a telemedicine or digital health company and/or substantial experience in digital health, telehealth, or health-tech gained at a private or publicly traded company or large law firm.
Strong HIPAA/HITECH experience, including negotiating BAAs and providing privacy counseling and compliance program support.
Experience advising on state telehealth, licensure, and professional entity issues across multiple states.
Working knowledge of health care fraud and abuse laws and familiarity of how they apply to digital health arrangements.
Proven track record in a high-growth startup or scale-up environment, ideally as a primary legal resource or in a role with substantial autonomy and broad responsibility.
Experience reviewing and negotiating complex commercial agreements, including digital health platform agreements, partner agreements, vendor agreements, and BAAs.
Ability to operate independently in a fast-paced environment and work cross-functionally with clinical, operations, product, and commercial teams.

Nice To Haves

Familiarity with DME supplier licensing, DMEPOS accreditation, and related state licensure requirements.
Knowledge of state consumer health data privacy laws and surprise billing requirements.
Experience with CMS or payor billing compliance issues.
Experience building legal operations infrastructure, including templates, workflows, and intake processes.

Responsibilities

Own the HIPAA/HITECH compliance program end-to-end, including policies, training, BAAs, incident response, and annual audits.
Navigate the patchwork of state telehealth laws, including prescribing rules, licensure, cross-state practice, professional entity requirements, and translate them into operational policies policy the clinical team can actually follow.
Own price transparency compliance, including applicable — federal and state-level notice and disclosure requirements.
Own CMS, Medicaid, and commercial payor compliance on the billing and documentation issues, with a focus on side — bulletproof audit readiness.
Navigate complex patient-specific legal scenarios at the intersection of HIPAA, state privacy law, and third-party reporting obligations.
Own the legal and compliance framework around AI-assisted clinical tools, including privacy obligations, informed consent language, and evolving state-level AI health requirements.
Monitor and translate the evolving regulatory landscape around health data and AI, including FTC enforcement trends, state consumer health data laws, and CMS guidance, into practical clear operational policy.
Review and negotiate payor contracts and major commercial agreements, including MSAs, fee schedules, network agreements, digital health platform agreements, and BAAs, ensuring key risks and obligations are identified and managed.
Support the structuring of and review channel partner, marketing, and platform agreements in compliance with the Anti-Kickback Statute (AKS) and applicable state fee-splitting law.
Review and structure strategic partnership agreements, including third-party device integrations, co-marketing arrangements, and data-sharing provisions, with an eye toward regulatory risk, IP, and privacy.
Own maintenance of the licensure required to operate as a digital health clinic and DME supplier across all 50 states, including tracking renewals and coordinating submissions.
Monitor payor compliance developments, including coverage policy updates, LCD changes, and documentation requirements, and translating them into operational guidance the clinical and billing teams can act on.
Support state expansion from a licensing and compliance standpoint by identifying legal— mapping the regulatory requirements early in the launch process.
Lead the formation of new legal entities as DME operations expand, including entity formation, qualification, registered agent matters, and related state compliance requirements.
Manage annual reporting and statutory compliance obligations across all 50 states, including filings, registered agent renewals, professional entity maintenance, state qualification filings, and good standing certificates.
Support board governance and corporate housekeeping, including resolutions, minutes, officer certificates, and intercompany documentation.
Manage external counsel support and ensure it is used thoughtfully and efficiently when needed.
Build and maintain internal legal self-service tools, including contract template libraries, approved contracting and regulatory playbooks, issue-spotting checklists, and process documentation, so the business can move faster with appropriate guardrails.