Privacy AI Counsel

AMN Healthcare•Dallas, TX

5d•Hybrid

About The Position

The Privacy AI Counsel manages a strategic, enterprise-wide privacy program that supports business operations, strengthens legal and regulatory readiness, reduces privacy- and AI-related risk, and enables consistent practices for data use, AI deployment, incident response, technology contracting, and privacy-by-design. The role serves as a legal and operational advisor to business, technology, security, product, marketing, and leadership stakeholders on privacy strategy, AI governance, contracting, vendor risk, regulatory change, training, and scalable controls. The position is based in Dallas, Texas, with three days per week onsite. Work is performed in an office or home-office environment. The role requires operating standard office equipment and keyboards; reasonable accommodations are available to qualified individuals with disabilities.

Requirements

Juris Doctorate.
Seven to ten years of legal, privacy, compliance, or regulatory experience, including at least five years working in privacy, data protection, technology transactions, cybersecurity, healthcare, technology contracting, or related legal functions.
In-depth understanding and working experience with privacy compliance laws, healthcare privacy requirements, data protection principles, NIST frameworks, and regulatory frameworks, including HIPAA, TCPA, GDPR, CCPA/CPRA, state privacy laws, and breach notification laws.
Experience drafting, reviewing, and negotiating technology contracts, including SaaS, cloud, software licensing, data processing, business associate, confidentiality, cybersecurity, vendor, professional services, and client contract terms.
Ability to effectively use technology, automation, and AI-enabled tools to improve productivity, support decision-making, and enhance business outcomes while following company policies and responsible AI practices.
Excellent time management, prioritization, and organizational skills, with high work standards and attention to detail.

Nice To Haves

CIPP/US, CIPM, CIPT, AIGP, or comparable privacy certification.
Admission to the Texas Bar.

Responsibilities

Develop, implement, and manage an enterprise-wide privacy program that protects personal, confidential, protected, and business information while enabling appropriate innovation.
Advise business, IT, security, marketing, product, and operational teams on privacy and AI-related laws, AI governance, data use, data sharing, retention, and disclosure requirements.
Monitor, interpret, and operationalize applicable privacy, healthcare, AI, cybersecurity, data protection, consumer protection, and technology laws and regulatory guidance, including HIPAA, TCPA, state privacy laws, GDPR, breach notification laws, and emerging AI requirements.
Lead or support reviews of AI use cases to address privacy and other legal compliance requirements.
Draft, review, and negotiate technology contracts and related privacy, AI, data protection, confidentiality, cybersecurity, business associate, data processing, SaaS, cloud, software licensing, professional services, vendor, and client contract terms.
Partner with information security, IT, and business owners to evaluate technology vendors, AI tools, subcontractors, data flows, security controls, contractual protections, and third-party privacy, AI, and cybersecurity risks.
Lead or support investigation, assessment, documentation, escalation, and resolution of potential privacy or data security incidents, including breach analysis, notification obligations, remediation planning, root cause analysis, and stakeholder coordination.
Develop and maintain program documentation, including policies, procedures, notices, data protection guidance, incident records, risk assessments, AI impact assessments, playbooks, data inventories, and records of processing activities.
Conduct privacy impact assessments, data protection impact assessments, AI impact assessments, and technology risk reviews for new products, services, systems, vendor relationships, business processes, data initiatives, and organizational changes.
Translate complex legal, privacy, AI, and technology requirements into practical, business-oriented guidance, templates, playbooks, controls, and training materials for cross-functional stakeholders.
Support audits, assessments, regulatory inquiries, and continuous improvement by identifying privacy, AI, and technology contracting gaps, recommending remediation, tracking mitigation efforts, and reporting on program maturity and risk trends.
Advise on data governance and lifecycle management, including data collection, access, use, sharing, storage, retention, disposal, secondary use, de-identification, anonymization, cross-border transfers, and responsible AI data stewardship.
Support merger, acquisition, divestiture, integration, and strategic technology initiatives by assessing privacy, AI, data security, and technology contract risks and helping align acquired or transitioning businesses with company practices.