Privacy & AI Counsel

Our client, a publicly traded digital health company leveraging technology and AI to transform care delivery, has exclusively retained Solutus Legal Search to assist the executives in their search for a Senior Privacy & AI Counsel. This role reports to the Associate General Counsel, Product, and will be based in San Francisco, CA.

This attorney will serve as a key member of the legal team, acting as a strategic partner to Product, R&D, Hardware, Marketing, and Clinical teams as they develop and launch innovative healthcare solutions. The role is highly integrated with the business and focuses on enabling responsible innovation by embedding privacy and AI governance into product development and operational decision-making. This position offers meaningful exposure to cutting-edge issues at the intersection of healthcare, data, and artificial intelligence, and plays a critical role in maintaining trust with customers and stakeholders.

Responsibilities include:

• Developing and maintaining privacy and AI governance policies, procedures, and best practices in collaboration with Legal and Compliance teams.
• Advising cross-functional stakeholders on privacy, data protection, and AI-related legal and regulatory risks, including supporting product development with privacy-by-design principles.
• Leading privacy impact assessments and data protection impact assessments, and guiding risk mitigation strategies.
• Supporting incident response, regulatory inquiries, and internal investigations related to privacy and data security in coordination with Security and Compliance teams.
• Drafting, reviewing, and negotiating agreements with privacy and data protection implications, including data sharing agreements and business associate agreements.
• Partnering with client-facing and commercial teams to address privacy and AI-related inquiries and ensure alignment with regulatory obligations.

The ideal candidate is a business-minded attorney with deep expertise in privacy and data protection who is comfortable operating in a fast-paced, evolving environment and partnering directly with technical and business stakeholders. This role requires strong judgment, the ability to translate complex regulatory frameworks into practical guidance, and a proactive, solutions-oriented approach to managing risk while enabling innovation.

Experience includes:

• Approximately 6-8 years of legal experience with a focus on privacy, data protection, and related regulatory matters.
• Juris Doctor (J.D.) from an accredited law school and active bar membership in at least one U.S. jurisdiction.
• Deep knowledge of U.S. and international privacy laws and regulations, including HIPAA, GDPR, and CCPA.