Director, Privacy Counsel

Omada Health
United States
Workplace: RemoteFull timeUSD 232,320 - 303,600 annuallyFunction: Legal, Risk & ComplianceExperience: 8+ yearsEducation: professionalSkills: ["Cross-functional collaboration","Communication","Judgment","Attention to detail","Organizational skills"]

Own and mature an enterprise privacy program, guiding Omada’s compliance strategy across HIPAA Privacy, Security, and Breach Notification. Lead privacy-by-design for digital products, run privacy risk assessments (data governance, vendor due diligence, and deal/privacy reviews), and manage end-to-end privacy incident response. Advise on state consumer health data/privacy laws, AI privacy and governance, interoperability/HIE requirements (Carequality, CommonWell, TEFCA), and privacy training to build an enduring privacy culture.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Omada Health
Omada Health
1 month ago

Director, Privacy Counsel

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 12 hours agoStatus: Live

Job Summary

Own and mature an enterprise privacy program, guiding Omada’s compliance strategy across HIPAA Privacy, Security, and Breach Notification. Lead privacy-by-design for digital products, run privacy risk assessments (data governance, vendor due diligence, and deal/privacy reviews), and manage end-to-end privacy incident response. Advise on state consumer health data/privacy laws, AI privacy and governance, interoperability/HIE requirements (Carequality, CommonWell, TEFCA), and privacy training to build an enduring privacy culture.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Director level

Key Responsibilities

  • •Manage and mature Omada’s HIPAA privacy program, including policy/procedure development and incident investigations through breach determination and response.
  • •Drive privacy-by-design by embedding privacy requirements into product development, engineering workflows, clinical operations, and other business processes.
  • •Execute privacy risk assessments, including data governance, vendor due diligence, and privacy reviews for commercial deals with employers, health plans, and PBMs.
  • •Provide expert consumer privacy guidance covering state consumer health data/privacy laws, digital advertising, and tracking technologies; advise on AI privacy guidance and governance.
  • •Support interoperability and health information exchange participation (e.g., Carequality, CommonWell, TEFCA) and counsel on privacy/data use requirements; develop and deliver privacy training and culture-building initiatives.

Pay and Benefits

Salary: USD 232,320 - 303,600 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVision401kParental LeaveRemote Work

Key Requirements

  • •J.D. from an accredited law school with active bar admission.
  • •8+ years of privacy law experience, including in-house experience in healthcare/digital health/life sciences and/or top-tier law firm counseling those clients.
  • •Deep expertise in HIPAA Privacy, Security, and Breach Notification Rules, plus fluency in state consumer privacy and consumer health data laws (e.g., WMHMDA, CCPA/CPRA) and AI governance.
  • •Proven experience managing end-to-end privacy incident response and breach notification processes from triage through regulator/stakeholder notifications.
  • •Experience advising on privacy-by-design for digital products and communicating complex regulatory concepts clearly to non-legal audiences.
Experience:8+ yearsHealthcareDigital healthLife sciencesConsumer technology
Education:Professional (JD, MD, etc.)
Skills:Cross-functional collaborationCommunicationJudgmentAttention to detailOrganizational skills
Certifications:CIPP/USCIPMCHPS
Languages:English
Tech Stack:HIPAA PrivacyHIPAA SecurityBreach Notification RulesWMHMDACCPA/CPRAAI governanceAI privacyMachine learningCarequalityCommonWellTEFCAIRB

Company Brief

Omada Health
Provides digital care programs for chronic conditions like diabetes, hypertension, and behavioral health, combining coaching, connected devices, and data-driven interventions to improve health outcomes and reduce costs for employers and health plans.
Industry: Digital Therapeutics
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn