Back to jobs
New

Counsel, Health Data and Privacy

USA Remote

About Care Access

Care Access is working to make the future of health better for all. With hundreds of research locations, mobile clinics, and clinicians across the globe, we bring world-class research and health services directly to communities that often face barriers to care. We are dedicated to ensuring that every person has the opportunity to understand their health, access the care they need, and contribute to the medical breakthroughs of tomorrow.

With programs like Future of Medicine, which makes advanced health screenings and research opportunities accessible to communities worldwide, and Difference Makers, which supports local leaders to expand their community health and wellbeing efforts, we put people at the heart of medical progress. Through partnerships, technology, and perseverance, we are reimagining how clinical research and health services reach the world. Together, we are building a future of health that is better and more accessible for all.

To learn more about Care Access, visit www.CareAccess.com.

How This Role Makes a Difference

We are seeking a pragmatic, business-oriented Counsel, Health Data & Privacy to join our Legal & Compliance team. This role will focus primarily on HIPAA and health data privacy advisory, negotiation of data protection and healthcare-related agreements, and support of global data protection compliance across our clinical research and operational activities. 

The ideal candidate brings strong experience with HIPAA and U.S. federal and state privacy laws, meaningful experience with GDPR and other international data protection frameworks and demonstrated capability negotiating data protection and healthcare-related agreements. This role requires both strategic and tactical involvement in health data governance, privacy compliance, and complex data contracting, as well as close collaboration with clinical, operational, procurement, and technology stakeholders. The successful candidate will be a skilled writer and pragmatic advisor who communicates effectively across the organization, evaluates risk with sound judgment, develops risk-calibrated solutions that enable business objectives, and supports implementation in a fast-paced, evolving healthcare and research environment. 

How You'll Make An Impact

  • Health Data, AI & Global Privacy Governance
    • Privacy Law Expertise: Provide strategic and practical legal advice on global privacy and data protection laws, including GDPR, HIPAA, CCPA/CPRA, and other U.S. state and federal privacy laws. Experience with GDPR and HIPAA mandatory.  
    • AI & Emerging Technologies: Advise on privacy and data protection implications of AI-enabled tools, machine learning systems, and other emerging technologies involving health and personal data. Conduct and draft legal risk assessments addressing automated processing, training data use, model outputs, human-in-the-loop safeguards, cross-border considerations, and evolving regulatory frameworks.
    • Clinical Support: Partner with clinical and operations teams to advise on privacy and data protection matters related to clinical research activities, including cross-border data transfers, site operations, and subject data rights.  
    • Contracting & Transactions: Draft, review, and negotiate data processing agreements, data transfer agreements, data sections of clinical trial agreements, licensing deals, and other contracts involving company, personal or sensitive data. 
    • Cross-Functional Partnership: Act as a trusted legal advisor to teams across the company to develop practical, risk-adjusted solutions that support compliance and responsible business growth.  
  • Commercial & Strategic Transactions Support
    • Commercial Contracting: Draft, review, and negotiate a broad range of commercial agreements, including vendor agreements, services agreements, research collaborations, and data-driven partnerships.  
    • Strategic Transactions & Partnerships: Support structuring of healthcare and data-driven initiatives to align legal risk with business objectives. Partner with operational and procurement stakeholders to facilitate efficient and compliant transactions.  
    • Business Enablement: Proactively support and advise emerging business lines and new initiatives to drive business growth while mitigating risk
  • Perform other legal tasks and projects assigned by legal leadership.  

The Expertise Required

  • Strong working knowledge of HIPAA and U.S. health privacy laws, including experience advising on use and disclosure of PHI, research authorizations, and breach analysis. 
  • Demonstrated experience drafting and negotiating Business Associate Agreements (BAAs), Data Processing Agreements (DPAs), and data protection provisions in commercial agreements. 
  • Experience drafting or supporting AI and automated decision-making risk assessments, privacy impact assessments, or related governance documentation for internal review or regulatory purposes. 
  • Working knowledge of GDPR and international data transfer mechanisms, including controller/processor analysis and cross-border data considerations. 
  • Ability to assess and clearly communicate legal risk in operational and commercial contexts. 
  • Strong drafting, analytical, and negotiation skills, with attention to detail. 
  • Business-oriented mindset with the ability to balance compliance obligations and commercial objectives. 
  • Ability to work collaboratively across clinical, operational, procurement, and technology teams. 
  • Sound judgment in escalating enterprise-level or reputational risk. 
  • For this position, you must be currently authorized to work in the United States without the need for sponsorship for a non-immigrant visa. 

Certifications/Licenses, Education, and Experience

  • Juris Doctor (JD) or equivalent law degree from an accredited institution. 
  • 3-6+ years of legal experience, including substantive GDPR experience and direct involvement in HIPAA and U.S. privacy law. 
  • Licenses: 
    • Licensed to practice law in at least one state in the United States and eligible for in-house corporate practice in state of residence. 
    • CIPP or other similar certifications preferred. 

How We Work Together

  • Location: Remote within the United States. This role requires 100% of work to be performed in a remote office environment.
  • Travel: This is a remote position with less than 10% travel requirements. Occasional planned travel may be required as part of the role.
  • Physical demands associated with this position Include: The ability to use keyboards and other computer equipment.

The expected salary range for this role is $140,000 - $170,000 USD per year for full time team members.

Benefits & Perks (US Full Time Employees)

  • Paid Time Off (PTO) and Company Paid Holidays
  • 100% Employer paid medical, dental, and vision insurance plan options
  • Health Savings Account and Flexible Spending Accounts
  • Bi-weekly HSA employer contribution
  • Company paid Short-Term Disability and Long-Term Disability
  • 401(k) Retirement Plan, with Company Match 

Diversity & Inclusion

We work with and serve people from diverse cultures and communities around the world. We are stronger and better when we build a team representing the communities we support. We maintain an inclusive culture where people from a broad range of backgrounds feel valued and respected as they contribute to our mission. 

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to, and will not be discriminated against on the basis of, race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Care Access is unable to sponsor work visas at this time.

If you need an accommodation to apply for a role with Care Access, please reach out to: TalentAcquisition@careaccess.com

Mandatory Employer Disclosures:
Notice to Illinois applicants: Applicants are not obligated to disclose expunged juvenile records or adjudication, arrest, or conviction.
Notice to Connecticut applicants: Care Access may require applicants to submit to a urinalysis drug test in connection with an application for employment.
Notice to Arizona, Georgia, Indiana, and North Dakota applicants: Care Access complies with applicable laws prohibiting smoking in and around places of employment.
Notice to Massachusetts applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Notice to Rhode Island applicants: Care Access complies with Rhode Island law prohibiting smoking in enclosed areas within places of employment. Care Access is also subject to is subject to Chapters 29–38 of Title 28 of the Rhode Island General Laws.
Notice to Maryland applicants: UNDER MARYLAND LAW, AN EMPLOYER MAY NOT REQUIRE OR DEMAND, AS A CONDITION OF EMPLOYMENT, PROSPECTIVE EMPLOYMENT, OR CONTINUED EMPLOYMENT, THAT AN INDIVIDUAL SUBMIT TO OR TAKE A LIE DETECTOR OR SIMILAR TEST. AN EMPLOYER WHO VIOLATES THIS LAW IS GUILTY OF A MISDEMEANOR AND SUBJECT TO A FINE NOT EXCEEDING $100. 

Create a Job Alert

Interested in building your career at Care Access? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Care Access’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.