Assistant General Counsel - IT & Privacy

Assistant General Counsel - IT & Privacy

The Assistant General Counsel – IT & Privacy provides strategic and operational legal support for information technology, data governance, privacy, and digital innovation initiatives across a complex healthcare enterprise. This role serves as a key advisor to executive leadership and enterprise teams on technology-enabled transformation, ensuring compliance with applicable laws while enabling responsible innovation, operational efficiency, and mission-aligned growth. This position requires seasoned attorney skills applied to a specialized IT and privacy practice.

The role emphasizes negotiation of complex technology contracts and transactions, data governance, artificial intelligence, digital health, research enablement, and regulatory risk management in a highly regulated industry. The Assistant General Counsel – IT & Privacy joins an engaged legal team that functions both independently and collaboratively under the leadership of the health system's Senior Vice President and General Counsel.

Responsibilities and Essential Job Functions

• Provides legal counsel on enterprise IT initiatives, including cloud services, SaaS platforms, electronic health record integrations, digital health tools, telehealth solutions, mobile applications, and advanced analytics technologies.
• Drafts, reviews, and negotiates complex commercial technology agreements, including software licenses, SaaS and PaaS agreements, data use and data processing agreements, technology development agreements, and strategic vendor partnerships.
• Advises IT, digital, and operational leaders on data rights, intellectual property strategy, cybersecurity, patient safety, operational risk, and regulatory compliance.
• Supports optimization of technology to improve efficiency, consistency, and speed to execution while maintaining appropriate compliance and risk mitigation through policy and governance.
• Advises on compliance with federal, state, and international privacy and data protection laws, including HIPAA, state consumer privacy laws, and cross-border data transfer requirements.
• Supports development, implementation, and maintenance of enterprise policies and standards governing data use, data sharing, de-identification, secondary use, and retention.
• Partners with privacy, security, compliance, risk/claims, and operational teams to evaluate and respond to privacy incidents, security events, and regulatory reporting obligations.
• Provides legal guidance on third-party data sharing, vendor risk management, and information governance structures.
• Advises on legal and regulatory considerations related to artificial intelligence and emerging technologies, including ethical use, risk mitigation, transparency, and governance.
• Supports enterprise AI governance frameworks, including policy development, committee participation, and review of AI-enabled technology incidents or events.
• Counsels business and clinical leaders on responsible deployment of AI technologies in operational, research, and patient-facing contexts.
• Provides legal support for research, innovation, and commercialization initiatives, including compliance with human subject research requirements and data use restrictions.
• Negotiates industry-sponsored and investigator-initiated clinical trial agreements, data licenses, material transfer agreements, and research collaboration agreements.
• Advises on compliant data commercialization and monetization strategies, balancing innovation, regulatory obligations and reputational risk considerations.
• Identifies, assesses, and mitigates legal risks associated with technology, data use, privacy, and digital initiatives.
• Supports dispute resolution related to technology vendors, data partners, and digital initiatives, including negotiation, alternative dispute resolution, and management of outside counsel.
• Monitors and interprets regulatory developments, enforcement activity, and industry trends affecting technology, privacy, AI, and digital health, and translates them into practical guidance for stakeholders.
• Serves as a trusted advisor to executive leadership, IT leadership, compliance, privacy, research, and…