Data Privacy Compliance Specialist

DeepHealth; Netherlands; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

DeepHealth is seeking a Data Privacy Compliance Specialist to support global privacy programs, including GDPR and HIPAA. You will report to the Data Privacy Compliance Lead and work across the organization to ensure that personal data is collected, stored, and processed in line with privacy laws and DeepHealth requirements.

You will help with Privacy by Design in product development, assist with DPAs and Transfer Impact Assessments, and collaborate with vendors and internal teams to strengthen

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• Minimum of 2 years of experience in a regulated industry; medical device experience preferred.
• Strong knowledge of GDPR and HIPAA is required.

Responsibilities

• Support privacy programs and ensure compliance with local, national, and global privacy laws.
• Assist Privacy by Design in product development and AI use cases.
• Collaborate with Vendors on DPAs and Transfer Impact Assessments.
• Research country-specific privacy frameworks to support compliance and opportunities.
• Collaborate cross-functionally to implement technical and organizational privacy measures.
• Monitor how personal data is collected, stored, and processed for compliance.
• Participate in investigations and impact assessments with privacy implications.
• Serve as backup contact for data protection authorities and data subjects.
• Support audit readiness and documentation for privacy activities.
• Assist risk management frameworks such as GDPR and HIPAA.

Skills

GDPR

HIPAA

Privacy by Design

Data protection

Regulatory compliance

Education

Bachelor's degree

Job description

The Data Privacy Compliance Specialist supports DeepHealth's global data privacy programs, including HIPAA and GDPR. Reporting to the Data Privacy Compliance Lead, this role collaborates across the organization to help ensure personal data is collected, processed, and stored in line with applicable privacy laws and DeepHealth requirements.

Essential Duties And Responsibilities

• Support organizational data privacy efforts and help ensure compliance with applicable local, national, and global privacy laws and regulations.
• Assist with the Privacy by Design program supporting product development and modification, including software and AI use cases.
• Collaborate with Vendor Management on vendor qualification and on implementation of Data Processing Agreements and Transfer Impact Assessments as applicable.
• Research and review country-specific data privacy frameworks and regulations to support continued compliance and business opportunities.
• Collaborate cross-functionally to implement technical and organizational measures that support data privacy.
• Monitor how personal data is collected, processed, and stored for compliance with applicable laws.
• Participate in investigations and impact assessments related to information security events with privacy implications.
• Serve as a backup point of contact for data protection authorities and data subjects, handling inquiries and requests.
• Collaborate cross-functionally to improve data privacy processes in support of risk management frameworks such as GDPR and HIPAA.
• Maintain clear documentation of privacy activities and support audit and regulatory readiness as assigned.

Minimum Qualifications, Education And Experience

• Bachelor's degree in a relevant field, or equivalent practical experience (required).
• Minimum of 2 years of experience in a regulated industry (required); medical device experience preferred.
• Software and/or Software as a Medical Device experience preferred.
• Strong knowledge of GDPR and HIPAA (required).
• Excellent written and oral communication skills (required).
• Preferred: Experience supporting privacy assessments, DPAs, or Privacy by Design activities.

Quality Standards

• Communicates, cooperates, and consistently functions professionally and harmoniously with all levels of supervision, co-workers, visitors and vendors.
• Demonstrates initiative, personal awareness, professionalism and integrity, and exercises confidentiality in all areas of performance.
• Follows all local, regional and country laws concerning employment.
• Follows all DeepHealth policies and procedures.
• Follows data privacy, compliance, safety and confidentiality standards at all times.
• Practices universal safety precautions.
• Promotes good public relations on the phone and in person.
• Adapts and is willing to learn new tasks, methods, and systems.
• Reports to work regularly as scheduled; consistently punctual with respect to working hours, meal and rest breaks, and maintains satisfactory personal attendance in accordance with DeepHealth guidelines.
• Completes job responsibilities in a quality and timely manner.

Travel

• This position requires travel up to approximately 10%.

Working Environment

• European Union. Remote-friendly office-based role.

Physical Demands

• The employee must be able to perform the essential duties and responsibilities of the position, with or without reasonable accommodation.