Privacy Counsel II

GoodRx•CA HQ, CA

1d•$164,000 - $350,000

About The Position

The Privacy Counsel II is a key member of GoodRx’s legal team, focused on privacy matters and helping develop Privacy Program objectives. The role exercises independent judgment on complex privacy issues, stays current on relevant data privacy laws and regulations, and works collaboratively with cross-functional teams. It may also support other matters as needed within a fast-moving, lean legal organization. The position reports to GoodRx’s Director, Privacy Compliance Programs. GoodRx seeks an attorney with a JD, state bar admission, and at least eight years of relevant experience focused on data privacy. The role requires expertise advising on privacy laws and regulations, direct-to-consumer product and marketing initiatives, cross-functional compliance matters, and data protection agreements. Healthcare experience, particularly in direct-to-consumer healthcare, is a plus. Pay ranges vary by work location: San Francisco and Seattle, $218,000–$350,000; New York, $200,000–$321,000; Santa Monica, $182,000–$292,000; and other office locations, $164,000–$263,000. Starting pay depends on job-related skills, experience, qualifications, and other business and organizational factors. Additional compensation may include annual cash bonuses or commission and annual equity grants. GoodRx describes its benefits as including medical, dental, and vision insurance, a 401(k) with company match, an ESPP, unlimited vacation, paid holidays, sick leave, mental and financial wellness programs, fertility benefits, parental leave, pet insurance, supplemental life insurance, and company-paid short- and long-term disability.

Requirements

Juris Doctor (JD) and admission to a state bar.
At least 8 years of relevant in-house or law firm experience focused on data privacy matters.
Comprehensive understanding of and experience advising on data privacy and related statutes, regulations, and guidance, including CCPA, TCPA, CAN-SPAM, and new data privacy regulations.
Experience advising on direct-to-consumer product and marketing initiatives from a data privacy perspective.
Experience working cross-functionally on compliance matters, coordinating across teams, and influencing diverse stakeholders.
Experience drafting and negotiating data protection agreements and provisions.
Comfort working in a fast-paced, high-growth environment and handling unfamiliar tasks and questions.
Willingness to take on and drive projects from start to finish.
Compliance with company safety and security policies and procedures, vigilance regarding potential security threats, and proactive communication with the Security Team.

Nice To Haves

Experience in the healthcare space, especially direct-to-consumer healthcare.

Responsibilities

Counsel on privacy assessments and product-related matters, resolving significant issues and evaluating business implications using broad privacy expertise.
Develop training, playbooks, and FAQ libraries to provide teams with current privacy guidance.
Provide practical, timely, strategic, and high-quality legal advice on data privacy and security matters as a subject matter expert.
Monitor, brief, and advise on privacy laws and legislative and regulatory developments; lead the development and updating of policies, procedures, and internal work plans for upcoming regulations.
Lead reviews of marketing initiatives for compliance with data protection laws.
Lead Privacy Program initiatives and risk-management workstreams from start to finish, with accountability for results that may affect the entire function.
Review, draft, and negotiate privacy and data security terms in business partner and vendor contracts, including data processing agreements and data protection terms.
Build cross-functional networks, provide thought leadership on organizational initiatives, communicate complex privacy matters in light of business priorities, influence stakeholders, and guide others’ work.
Support privacy vendor management, including vendor offboarding.
Review and comply with company safety and security policies and procedures, remain alert to potential security threats, and communicate concerns to the Security Team.