Data Privacy Specialist

Job Title

Directly review, redline, and negotiate privacy/data-use terms in client contracts. Personally draft and execute custom Data Processing Agreements (DPAs) for EU healthcare systems and Business Associate Agreements (BAAs) for US hospital networks, ensuring Client retains critical rights to use de-identified metadata for AI training.

Own the end-to-end operational heavy lifting required to fulfill and self-certify under the EU-U.S. Data Privacy Framework (DPF), the UK Extension, and the Swiss-U.S. DPF.

Personally author Data Protection Impact Assessments (DPIAs) for new AI models and features from scratch. Build and maintain Article 30 Records of Processing Activities (RoPA) and ensure adherence to HIPAA's De-identification Standards.

Partner directly with product and engineering teams to evaluate training datasets at the database level, ensuring technical compliance with privacy-by-design, data minimization, and cross-border transfer laws.

Requirements & Competencies

• Experience: 5+ years of dedicated, hands-on privacy execution in HealthTech, MedTech, or a clinical SaaS environment.
• Legal/Contract Fluency: A JD or equivalent legal background is strongly preferred. Must have a proven track record of directly negotiating complex commercial DPAs and BAAs with sophisticated enterprise hospital buyers without relying on outside counsel.
• Technical Execution: Demonstrable experience mapping actual data flows in cloud infrastructure (AWS/Azure) and handling data anonymization protocols.
• Preferred Certifications: Active IAPP credentials required (CIPP/E, CIPP/US, CIPM).

EEO Employer LanceSoft is a certified Minority Business Enterprise (MBE) and an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. LanceSoft makes hiring decisions based solely on qualifications, merit, and business needs at the time.