Senior Counsel, Privacy and Commercial Legal

What Commercial Transaction contributes to Cardinal Health

Legal provides the company with strategic, proactive, practical and cost-effective legal advice and services in order to protect the organization's assets, operations and image. This function provides legal counsel related to commercial, corporate securities, intellectual property, labor and employment, and regulatory law, among other areas. This function also litigates all company legal matters, manages outside counsel and manages legal operations.

Commercial Transaction provides legal advice, counsel and services to domestic and international businesses in support of customer, vendor, supplier, and strategic relationships, including drafting and negotiating contracts, participating in and providing input on business strategy, and otherwise acting as primary day-to-day legal contacts for business clients.

Job Summary

The Senior Legal Counsel, serves as the primary legal partner to leaders of a division within a business unit, providing counsel on legal issues and risk mitigation guidance. The Senior Legal Counsel reviews and negotiates commercial agreements with external parties on behalf of the business, protecting the business’ interests and ensuring that contracts are compliant. This job also reviews external communications to confirm legal compliance and liaises with a variety of Legal and other internal teams to resolve legal issues.

Responsibilities

• Report to the Vice President of Privacy & Specialty Solutions and assist with the implementation and maintenance of the Privacy program and the commercial legal work for the Biopharma Solutions and Strategic Sourcing business teams
• Serve as a functional expert working closely with & advising business leaders, commercial counsel, and other colleagues on all legal aspects of privacy, including data protection, data retention, data usage, data security and data breaches
• Advise and support the company on various strategic healthcare transactions, helping to ensure compliance with applicable healthcare regulations including HIPAA, Stark, Anti-Kickback and the False Claims Act
• Review, draft, and negotiate healthcare and privacy related agreements, such as service agreements, vendor agreements, confidentiality agreements, business associate and data processing agreements
• Research and analyze complex legal issues and provide practical and strategic advice to the business units
• Provide guidance, direction, and practical translation of legal privacy requirements to cross-functional teams on complex projects
• Assist with the management of regulatory inquiries, investigations or administrative actions related to privacy and data security or healthcare regulations
• Support acquisitions, divestitures, and joint ventures as they relate to privacy matters or the Biopharma Solutions and Strategic Sourcing teams
• Review policies and procedures drafted by Cardinal Health Compliance personnel to ensure compliance with applicable data privacy laws and regulations
• Assist with the design and provision of training on Privacy and applicable healthcare regulations
• Remain up to date on legislative developments in the field of privacy at the state, federal and international level that may affect Cardinal Health and its global subsidiaries, and work with commercial counsel and government relations to identify potential strategic changes that might be adopted

Qualifications

• 8-12 years of experience, preferred
• Bachelor's degree in related field, or equivalent work experience, preferred
• Juris Doctorate degree
• License to practice law in Ohio or active bar license in another state
• A minimum of four (4) years of legal experience, working primarily on a wide variety of privacy and data security matters and commercial legal matters
• Prior experience at a large law firm strongly preferred
• Extensive knowledge of U.S. privacy and data security laws, regulations, and standards, including HIPAA, CCPA, U.S. state and federal privacy, data security, breach notification, consumer protection and employment-related privacy laws and regulations
• Extensive knowledge of federal and state healthcare laws and regulations
• Knowledge of EU privacy and data security laws, including GDPR preferred
• Experience handling privacy and commercial legal matters in the health care industry is strongly preferred
• Demonstrated transactional experience, including reviewing, drafting, and negotiating commercial healthcare agreements and privacy and data protection contract terms and agreements, such as Business Associate Agreements and data processing, usage, and/or transfer agreements
• Excellent drafting and negotiation skills.
• Experience with implementing incident response plans, res