About the Role The Associate Counsel, Privacy will be a key member of the GoodRx legal team focused on privacy issues and will be an integral part of a fast-growing team that is expanding quickly from a marketing and product perspective. You will help assess and provide guidance for new products and features in the direct-to-consumer and healthcare space from early stages of development through launch. You will become an in-house expert on and provide timely review and guidance for our consumer messaging and marketing programs, materials and tactics.
You will be expected to stay up-to-date on relevant laws and regulations in the data privacy space, including architecting and updating compliance programs. You will have the opportunity to pitch in on other matters as needed as part of a fast-moving, lean, efficient legal organization. The Associate Counsel, Privacy will report to the GoodRx’s General Counsel and will be based out of GoodRx’s Santa Monica, CA headquarters.
Act as a key internal lead and subject matter expert on all matters relating to privacy law, including providing practical, timely, strategic, and high-quality legal advice on data privacy and security matters
Actively monitor, brief, and advise on privacy laws and new legislative and regulatory developments, including taking lead on developing and updating policies and procedures and developing and updating internal workplans to comply with upcoming data privacy regulations
Lead on reviewing products and product features to ensure compliance with data protection laws.
Lead in reviewing marketing initiatives to ensure compliance with data protection laws.
Lead on reviewing, drafting, and negotiating of privacy and data security terms in contracts with business partners and vendors, including data processing agreements and data protection terms.
Skills & Qualifications:
You are an attorney with a JD, admission to a state bar, at least 5 years of relevant in-house or law firm experience focused on data privacy matters.
Comprehensive understanding and experience with providing advice on data privacy and related statutes, regulations and guidance is required, such as the CCPA, TCPA, and CAN-SPAM, as well as new data privacy regulations
Experience providing advice on direct-to-consumer product and marketing initiatives from a data privacy perspective
Experience working cross-functionally to implement compliance workplans
Experience drafting and negotiating data protection addendums
Experience in the healthcare space, especially direct-to-consumer healthcare space, is a plus
You are comfortable working in a fast-paced and high-growth environment, and handling tasks and answering questions that are unfamiliar to you
Willingness to take on and drive projects from start to finish