Product Counsel
Product Counsel partnering with Product and Engineering teams from early design through launch. Advise on privacy-by-design, HIPAA, state privacy laws, AI features, and user-facing legal documents in a healthcare advocacy startup.
About the job
Responsibilities
- Serve as the primary legal partner to Product and related Engineering teams, advising across the full product lifecycle—from early design through launch.
- Advise on privacy-by-design: data flows, collection, use, and protection of PHI and other sensitive data.
- Ensure compliance with HIPAA/HITECH, state consumer-health-privacy laws (e.g., Washington's My Health My Data Act), CCPA/CPRA, and other U.S. privacy and security requirements.
- Lead privacy assessments for new features and services, including AI-powered features, and translate results into concrete product requirements.
- Partner with Marketing on advertising claims, consumer-protection, FTC considerations, and ad-tech practices.
- Draft, negotiate, and maintain user-facing legal documents: terms of service, consents, privacy notices, and telehealth-related disclosures.
- Advise on data-sharing arrangements and vendor/partner integrations, coordinating on BAAs, DPAs, and related terms.
- Build templates, playbooks, and self-service guidance for a fast-scaling product organization.
- Partner cross-functionally with Security, Compliance, Operations, and Finance; escalate to Chief Legal Officer and leadership as needed.
Requirements
- JD from an accredited law school and active bar membership in good standing.
- 3-6 years’ experience counseling product and engineering teams on privacy and technology matters.
- Strong healthcare privacy and data-protection foundation, including HIPAA/HITECH and U.S. state privacy laws, ideally in healthcare, digital-health, or regulated environment.
- Fluency in AI/ML, intellectual property, consumer protection, and advertising/marketing law.
- Sound instincts on balancing legal risk versus business velocity; ability to provide clear, actionable advice.
- Excellent communication and cross-functional skills.
Nice-to-Haves
- Privacy certification (e.g., CIPP/US).
- Experience with health-data marketing/ad-tech.
- Familiarity with telehealth or marketplace models.
Skills
HIPAA, Hitech, CCPA, Cpra, Privacy By Design, AI/ML, Intellectual Property, Consumer Protection, Ftc Regulations, Baas, Dpas, Telehealth
Similar jobs
Legal jobs
Postman
New York, NYCommercial counsel will lead partner, customer, vendor, and procurement contracting while advising Sales, Product, Finance, Security, and other stakeholders. The role requires a U.S. J.D., bar admission, and 5–8 years of SaaS commercial legal experience.
6sense
United States
Employment Counsel will advise the People team on employment law, investigations, policies, compliance, and multijurisdictional workforce matters while supporting broader legal and governance needs. The role requires a J.D., U.S. bar admission, at least five years of legal experience, and meaningful employment law experience.
Virta Health
United States
Own day-to-day privacy operations and cross-functional compliance initiatives for a health technology company. The role requires 4–7 years of privacy or compliance experience, knowledge of HIPAA and state privacy laws, and expertise in assessments, incident response, and data subject requests.
Forus
New York, NY
The Legal Operations Manager will build and optimize Legal & Compliance workflows, technology, reporting, governance processes, and vendor operations. The role requires at least five years of legal operations experience and strong cross-functional execution, communication, and legal technology skills.
Plaid
San Francisco, CA
Provides corporate legal and governance support across Board activities, transactions, entity management, regulatory compliance, and potential IPO preparation. Requires a JD, U.S. Bar admission, and at least four years of relevant legal experience.