Chief Counsel, Privacy and Data Strategy

Who We Are

Verily is a subsidiary of Alphabet that is using a data-driven approach to change the way people manage their health and the way healthcare is delivered. Launched from Google X in 2015, our purpose is to bring the promise of precision health to everyone, every day. We are focused on generating and activating data from a variety of sources, including clinical, social, behavioral and the real world, to arrive at the best solutions for a person based on a comprehensive view of the evidence. Our unique expertise and capabilities in technology, data science and healthcare enable the entire healthcare ecosystem to drive better health outcomes.

Description

Reporting to the Chief Legal Officer, the Chief Counsel, Privacy and Data Strategy is responsible for providing legal, compliance, policy, and regulatory leadership and support on privacy, data protection, and cybersecurity matters for all Verily businesses, regions, and functions. The Chief Counsel will work closely with the Legal, Product, Compliance, Quality, Regulatory, IT, and Security to ensure compliance with all applicable data privacy laws and regulations globally.  

A hybrid role with three days per week in-office; possible locations of the role are Dallas, Raleigh, South San Francisco, or Boston. Preference for Dallas.

Responsibilities

• Provide specialist legal advice and subject-matter expertise required to support Verily’s leadership team and privacy program.
• Provide specialist consultation and support to other key functions (Legal, Product, Security, Public Policy, Marketing/Communications, and Leadership).
• Interface with senior business leaders to develop strategic plans for the collection, use, and sharing of personal data in a manner that maximizes its value while complying with applicable privacy laws and regulations.
• Advise on compliance across all aspects of global privacy law and regulation, including data protection, data retention, data security, and data breach rules.
• Maintain awareness of new laws, enforcement activity and other developments in the privacy domain, and drive discussion among key stakeholders across the company to continuously improve organizational privacy practices.
• Serve as the primary Legal point of contact for Alphabet and Google privacy teams and facilitate alignment with respect to privacy matters,
• Collaborate with development teams to ensure that new introductions or versions of products and services comply with applicable data privacy and security requirements (legal, contractual, or otherwise) and assist in the negotiation of data privacy and security provisions in related contracts/agreements.
• Collaborate with cross-functional representatives to drive compliance with applicable privacy laws and regulations, contractual obligations, internal policies and procedures, and breach investigation, mitigation, and notification responsibilities.
• Work in partnership with the Information Security team to ensure compliance with all applicable data security administrative, physical, and technical safeguards.
• In collaboration with Compliance and Information Security teams, provide privacy, data protection, and cybersecurity compliance training and periodic best practices tips/reminders.
• Assist with conducting periodic and as-needed business audits and risk assessments to assess data privacy and security compliance.
• Work and cooperate with designated supervisory authorities on issues relating to the processing of personal data.
• Work cross-functionally to resolve individual privacy, cybersecurity and ransomware compliance issues/questions and investigations, assessing causes, developing corrective actions, and ensuring consistent application of corrective actions.
• In collaboration with Litigation and Investigations teams, assist in managing disputes, litigation, and incidents related to privacy, data protection, and cybersecurity.
• Work cross-functionally within Legal and the business to assist with drafting, reviewing, and negotiating privacy-related provisions of proposed deals, relationships, and other issues requiring legal or compliance attention.
• Direct and indirect people leadership experience; hiring and developing a global team.
• Monitor advancements in privacy technologies like OneTrust to ensure organizational adaptation and compliance, as needed.
• Assist the Information Security team with the development and implementation of a data categorization and management infrastructure.
• Assure that the use of technologies maintain, and do not erode, privacy protections related to the use, collection, and disclosure of personal data.
• Manage outside counsel as necessary.
• Develop, implement, and train Company personnel on the Company's Incid