Privacy & AI Counsel

Hinge Health•San Francisco, CA

About The Position

Hinge Health is seeking a Senior Privacy and AI Counsel to join our Legal team. In this role, you will serve as a strategic legal partner to our Product, R&D, Hardware, Marketing, and Clinical teams as they develop and launch innovative new products and services in the healthcare space and play a leading role in ensuring the company’s compliance with privacy and AI laws and regulations. You will assess privacy risks and develop AI governance policies and best practices and be responsible for negotiating DSAs, BAAs and reviewing other agreements for privacy and AI issues. This position is essential for safeguarding the privacy of our customers and members, staying up-to-date on emerging technology issues, and maintaining the trust they place in us. You will report to the Associate General Counsel, Product and work closely with other members of the Legal & Compliance team, as well as cross-functional stakeholders across the organization — including access to senior leadership.

Requirements

Juris Doctor (JD) degree from an accredited law school.
Licensed to practice law in at least one U.S. jurisdiction.
5-7 years of experience in privacy law and data protection.
In-depth knowledge of U.S. and international privacy laws and regulations, including HIPAA, GDPR and CCPA.
Familiarity with privacy issues related to AI and machine learning, and general AI governance best practices.

Nice To Haves

Certified Information Privacy Professional (CIPP) or similar certification.
Strong analytical and problem-solving skills.
Experience using AI tools to enhance and accelerate deliverables
Experience working in the healthcare industry, preferably at a digital health company, combined with law firm experience at a nationally recognized firm
Experience and comfort with working at both an operational and strategic level.
Strong track record of cross-functional collaboration and ability to communicate complex legal and regulatory concepts in a clear, business-friendly manner
Self-starter who thrives working independently; comfortable with ambiguity and shifting priorities

Responsibilities

Develop and maintain, in collaboration with Compliance, privacy and AI policies and procedures in compliance with applicable laws and regulations.
Oversee privacy impact assessments and data protection impact assessments.
Provide guidance on privacy and AI related issues to various departments within the company.
Work with Product and R&D teams to embed privacy-by-design principles in design and execution decisions.
Monitor and respond to privacy-related inquiries and complaints, and lead incident response along with Security and Compliance teams.
Work with client-facing teams on privacy and AI related inquiries and oversight.
Collaborate with the security team to ensure data protection measures are in place.