Description:

About the role:
The Privacy Counsel I will be a key member of the GoodRx legal team focused on privacy issues and will be an integral part of a fast-growing team. You will be expected to stay up-to-date on relevant laws and regulations in the data privacy space, and work collaboratively with cross-functional teams. You will have the opportunity to pitch in on other matters as needed as part of a fast-moving, lean, efficient legal organization. The Counsel, Privacy will report to GoodRx's Director, Privacy Compliance Programs..

Responsibilities:

Counsel on privacy assessments and product-related matters
Create and contribute to training, playbooks, and FAQ libraries for various teams to ensure they have the most current privacy guidance
Act as a subject matter expert on all matters relating to privacy law, including providing practical, timely, strategic, and high-quality legal advice on data privacy and security matters
Actively monitor, brief, and advise on privacy laws and new legislative and regulatory developments, including taking lead on developing and updating policies and procedures and developing and updating internal workplans to comply with upcoming data privacy regulations
Lead in reviewing marketing initiatives to ensure compliance with data protection laws
Overall support of the Privacy Program and risk management processes
Support with reviewing, drafting, and negotiating of privacy and data security terms in contracts with business partners and vendors, including data processing agreements and data protection terms
Support with vendor management for privacy, including managing vendor offboarding

Skills & Qualifications:

You are an attorney with a JD, admission to a state bar, with 3 years of relevant in-house or law firm experience focused on data privacy matters.
Comprehensive understanding and experience with providing advice on data privacy and related statutes, regulations and guidance is required, such as the CCPA, TCPA, and CAN-SPAM, as well as new data privacy regulations
Experience providing advice on direct-to-consumer product and marketing initiatives from a data privacy perspective
Experience working cross-functionally on compliance matters
Experience drafting and negotiating data protection agreements and provisions
Experience in the healthcare space, especially direct-to-consumer healthcare space, is a plus
You are comfortable working in a fast-paced and high-growth environment, and handling tasks and answering questions that are unfamiliar to you
Willingness to take on and drive projects from start to finish