Corporate Counsel Privacy

Key Accountabilities / Core Job Responsibilities Employment Counseling & HR Partnership

• Serve as a primary legal partner to HR, People Operations, HRBPs, and business leaders on employment law, employee relations, and workforce matters.
• Advise on recruiting, hiring, onboarding, job descriptions, performance management, leaves and accommodations, workplace conduct, investigations, and offboarding.
• Provide practical guidance on employee relations matters, supporting workplace investigations and related employee communications.
• Provide employment support for Denali’s manufacturing facility and operational teams.
• Oversee employment-based immigration matters in partnership with HR and outside counsel including work authorization, visa sponsorship, I-9 compliance, employee mobility and immigration-related onboarding matters.
• Draft, review, and update employment-related policies, agreements, templates, and communications, and advise on compliant employment practices across the employee lifecycle, including hiring, onboarding, contingent workforce management, remote work arrangements, worker classification, and wage and hour compliance.
• Monitor employment law developments and develop and deliver training for HR, managers, and employees on employment law topics, including performance feedback, documentation, leaves and accommodations, workplace conduct, confidentiality, anti-harassment, discrimination, and retaliation.

• Advise on privacy and data protection matters across Denali, including workforce privacy, clinical privacy, commercial privacy, vendor privacy, and privacy considerations related to business operations.
• Provide legal guidance on the collection, use, sharing, retention, transfer, and protection of personal information across workforce, clinical, commercial and vendor-related activities.
• Support compliance with applicable privacy and data protection laws and standards, including U.S. state privacy laws, HIPAA-related considerations, GDPR and other international privacy requirements, clinical trial privacy requirements, health data privacy laws, marketing and communications privacy rules, and data breach notification obligations.
• Advise on privacy considerations related to clinical trials, research activities, patient engagement programs, health and genomic data, data sharing arrangements, and secondary use of data.
• Advise on commercial privacy matters, including healthcare professional and patient data, marketing and digital engagement activities, consent management, analytics, CRM platforms and vendor-supported programs.
• Partner with IT, Information Security, Compliance, HR, Clinical, Regulatory, Medical Affairs, Commercial, Procurement, and Contracts on privacy-by-design, data governance, vendor assessments, data incidents, and privacy risk mitigation.

• Manage employment-related disputes, agency inquiries and administrative proceedings, and coordinate with outside counsel on litigation, privacy matters and specialized legal issues.
• Support privacy-related investigations, complaints, regulatory inquiries, data subject requests, incident response, remediation, documentation, and notification analyses.
• Identify and mitigate employment and privacy risks through practical guidance, scalable processes, training, documentation, and cross-functional partnership.

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar (California preferred).
• Typically 10+ years of relevant legal experience, including 3+ years in-house.
• Strong employment law background spanning employee relations, investigations, performance management, terminations, leaves and accommodations, wage and hour, workplace policies, employment agreements, and compliance.
• Experience advising HR teams and business leaders with practical, risk-based, business-oriented guidance.
• Experience advising on privacy and data protection matters, including workforce privacy, notices, consent, data processing agreements, vendor issues, data subject rights, data transfers, privacy impact assessments, incident response, and…