Privacy AI Counsel

Job Summary

The Privacy AI Counsel, will Manage a strategic, enterprise-wide privacy program that supports business operations, strengthens legal and regulatory readiness, reduces privacy and AI-related risk, and enables consistent practices for data use, AI deployment, incident response, technology contracting, and privacy-by-design. This role will serve as a key legal and operational advisor to business, technology, security, product, marketing, and leadership stakeholders on privacy strategy, AI governance, contracting, vendor risk, regulatory change, training, and scalable controls.

Job Responsibilities

• Develop, implement, and manage an enterprise-wide privacy, program that protects personal, confidential, protected, and business information while enabling appropriate innovation.
• Advise business, IT, security, marketing, product, and operational teams on privacy and AI-related laws, AI governance, data use, data sharing, retention, and disclosure requirements.
• Monitor, interpret, and operationalize applicable privacy, healthcare, AI, cybersecurity, data protection, consumer protection, and technology laws and regulatory guidance, including HIPAA, TCPA, state privacy laws, GDPR, breach notification laws, and emerging federal, state, and international AI requirements.
• Lead or support review of AI use cases, to address privacy and other legal compliance requirements.
• Draft, review, and negotiate technology contracts and related privacy, AI, data protection, confidentiality, cybersecurity, business associate, data processing, SaaS, cloud, software licensing, professional services, vendor, and client contract terms.
• Partner with information security, IT, and business owners to evaluate technology vendors, AI tools, subcontractors, data flows, security controls, contractual protections, and third-party privacy, AI, and cybersecurity risks.
• Lead or support investigation, assessment, documentation, escalation, and resolution of potential privacy and/or, data security, related incidents, including breach analysis, notification obligations, remediation planning, root cause analysis, and stakeholder coordination.
• Develop and maintain program documentation, including policies, procedures, notices, data protection guidance, incident records, risk assessments, AI impact assessments, playbooks, data inventories, and records of processing activities.
• Conduct privacy impact assessments, data protection impact assessments, AI impact assessments, and technology risk reviews for new products, services, systems, vendor relationships, business processes, data initiatives, and organizational changes.
• Translate complex legal, privacy, AI, and technology requirements into practical, business-oriented guidance, templates, playbooks, controls, and training materials for cross-functional stakeholders.
• Support audits, assessments, regulatory inquiries, and continuous improvement activities by identifying privacy, AI, and technology contracting gaps, recommending remediation, tracking mitigation efforts, and reporting on program maturity and risk trends.
• Advise on data governance and lifecycle management practices, including data collection, access, use, sharing, storage, retention, disposal, secondary use, de-identification, anonymization, cross-border transfers, and responsible AI data stewardship.
• Support merger, acquisition, divestiture, integration, and strategic technology initiatives by assessing privacy, AI, data security, and technology contract risks and helping align acquired or transitioning businesses with company practices.

Key Skills

• Excellent time management, prioritization, and organizational skills with high work standards and attention to detail
• Achievement of privacy, AI governance, technology contract, vendor risk, and regulatory priorities.
• Quality of legal guidance, contract terms, risk assessments, AI reviews, and privacy analyses
• Completion of privacy reviews, AI assessments, technology contract reviews, vendor evaluations, and incident matters.
• Stakeholder feedback on responsiveness, practicality, and business-oriented support
• Accuracy of contract redlines, privacy terms, AI documentation, risk assessments, and regulatory analysis.
• Timely completion of contract reviews, privacy and AI assessments, incident support, and stakeholder requests.

Qualifications

• Education & Years of Experience Juris Doctorate plus 7-10 years of legal, privacy, compliance, or regulatory experience, including a minimum of 5 years working in privacy, data protection, technology transactions, cybersecurity, healthcare, technology contracting, or related legal functions
• In-depth understanding and working experience with privacy compliance laws, healthcare privacy requirements, data protection principles and