Privacy Counsel II (Remote)

Description:

About the role:
The Privacy Counsel II will be a key member of the GoodRx legal team focused on privacy issues and will be an integral part of the team. You will exercise independent judgment on complex privacy matters and help develop Privacy Program objectives. You will be expected to stay up-to-date on relevant laws and regulations in the data privacy space, and work collaboratively with cross-functional teams. You will have the opportunity to pitch in on other matters as needed as part of a fast-moving, lean, efficient legal organization. The Privacy Counsel II will report to GoodRx's Director, Privacy Compliance Programs.

Responsibilities:

• Counsel on privacy assessments and product-related matters, resolving significant matters and evaluating business implications by applying broad expertise and privacy knowledge.
• Develop training, playbooks, and FAQ libraries for various teams to ensure they have the most current privacy guidance
• Act as a subject matter expert on all matters relating to privacy law, including providing practical, timely, strategic, and high-quality legal advice on data privacy and security matters
• Actively monitor, brief, and advise on privacy laws and new legislative and regulatory developments, including taking lead on developing and updating policies and procedures and developing and updating internal work plans to comply with upcoming data privacy regulations
• Lead in reviewing marketing initiatives to ensure compliance with data protection laws
• Lead Privacy Program initiatives and risk management workstreams from start to finish, with accountability for results that may impact the entire function
• Lead the reviewing, drafting, and negotiation of privacy and data security terms in contracts with business partners and vendors, including data processing agreements and data protection terms
• Serve as an internal privacy subject matter expert, building cross functional networks and providing thought leadership on broader organizational initiatives; apply an understanding of business priorities to communicate complex privacy matters, influence diverse stakeholders, and guide the work of others
• Support with vendor management for privacy, including managing vendor offboarding

Skills & Qualifications:

• You are an attorney with a JD, admission to a state bar, with 8+ years of relevant in-house or law firm experience focused on data privacy matters.
• Comprehensive understanding and experience with providing advice on data privacy and related statutes, regulations and guidance is required, such as the CCPA, TCPA, and CAN-SPAM, as well as new data privacy regulations
• Experience providing advice on direct-to-consumer product and marketing initiatives from a data privacy perspective
• Experience working cross-functionally on compliance matters, including coordinating across teams and influencing diverse stakeholders
• Experience drafting and negotiating data protection agreements and provisions
• Experience in the healthcare space, especially direct-to-consumer healthcare space, is a plus
• You are comfortable working in a fast-paced and high-growth environment, and handling tasks and answering questions that are unfamiliar to you
• Willingness to take on and drive projects from start to finish

All GoodRx employees are responsible for reviewing and complying with all Company safety and security policies and procedures, being vigilant and observant of potential security threats (including phishing attempts) and proactively communicating with the Security Team to raise any concerns.

---