• Health information privacy (including human subjects research); Federal (HIPAA) and state (CMIA, Washington My Health My Data Act, Nevada SB 370) health care privacy laws;
• Consumer privacy;
• Other federal privacy laws, such as GLBA, FCRA, COPPA, and the FTC Act;
• Comprehensive state privacy laws, such as the CCPA;
• International privacy laws and regimes, such as the EU’s GDPR; and
• General technology and data flows.

Candidates also should have:

• Experience drafting privacy policies, negotiating privacy-related contracts and data processing agreements (BAAs, DPAs, DUAs), providing product counseling, and conducting privacy compliance assessments;
• Experience responding to and drafting notifications for privacy and data security incidents;
• Experience with ad tech (desirable but not essential);
• Superior academic credentials;
• Excellent oral, written, and interpersonal skills;