Corporate Counsel - Privacy & AI

Corporate Counsel I - Privacy & AI What you will be doing

Working under the direction of the Chief Privacy Officer, the Corporate Counsel I (Privacy) supports Premier's regulatory compliance with U.S. privacy and AI regulations, with secondary responsibility for key E.U. frameworks as applicable. Serving alongside Privacy Counsel I, this attorney will be one of the primary points of contact for practical, risk-based regulatory advice on the use of personal information and AI governance across the enterprise.

The role partners cross-functionally to continuously improve, operationalize, and evolve Premier's privacy and AI regulatory governance programs with a focus of translating legal requirements into scalable processes-including privacy and AI impact assessments, DSAR workflows, monitoring of online privacy and AI regulatory requirements, and privacy agreement creation and review. The attorney also proactively monitors and interprets recent and forthcoming regulatory developments to assess impact and preemptively incorporate applicable requirements into company policies, practices, procedures, and training.

The ideal candidate is a proactive, business-minded attorney who enjoys building compliance programs and processes, works well independently but also collaboratively, and provides clear, decisive recommendations. They thrive in a fast-paced, complex environment and collaborate effectively with senior management, IT/security, business teams, vendors, customers, and outside counsel. Strong judgment and familiarity with evolving U.S. and E.U. privacy and AI regulatory landscapes are essential, with an interest in helping scale Premier's maturing AI governance program over time.

• Support Premier's regulatory compliance with applicable privacy and AI laws, including proactively monitoring and interpreting developing laws, regulations, and industry updates.
• Provide practical, risk-based counsel to the business on compliance with U.S. privacy and AI requirements, with secondary responsibility for EU frameworks as applicable.
• Conduct privacy and AI impact assessments, support and manage data subject requests, help operationalize privacy processes and requirements, and coordinate with relevant third-party privacy vendors.
• Contribute to the maintenance and development of Premier's privacy and AI compliance policies and procedures, incorporating applicable regulatory requirements into scalable processes.
• Assist with privacy incident investigations, response, notice, and regulatory reporting, partnering with internal stakeholders and external parties as needed.
• Assist with privacy-related contract negotiations and support review of third-party privacy terms—such as data processing agreements, business associate agreement privacy provisions, and standard contractual clauses.
• Contribute to the development of enterprise privacy and AI governance training by providing regulatory guidance and helping to ensure accuracy and alignment with applicable laws.

• Work Experience:
  
  5 or more years applicable experience.
• Education:
  
  Juris Doctorate (Required).

• Skills:
  
  CIPP/US, CIPP/E, CIPM, AIGP (strongly desired).
• Experience operationalizing privacy processes and supporting privacy program implementation.
• Business experience translating regulatory requirements into practical, scalable policies and processes.
• Proven experience in U.S. privacy laws (consumer state laws, health data state laws, HIPAA, DOJ Final Rule), with familiarity with key EU frameworks such as GDPR & ePrivacy Directive.
• Understanding and demonstrated knowledge of emerging U.S. and EU AI laws (e.g., CA transparency and CO AI Act, etc., EU AI Act & Digital Omnibus) and the ability to apply them to business operations.
• Demonstrated ability to independently interpret and apply regulatory requirements to business operations and product development.
• Hands‑on experience supporting the development or enhancement of privacy governance structures, including procedures, ROPA, DSARs, PIAs, and related governance workflows.
• Drafting and negotiating privacy‑ and AI‑related terms in agreements (e.g., DPAs, SCCs,…