Assistant General Counsel – IT & Privacy

The University of Kansas Health System; North Kansas City (MO); On-site; USD 180,000 - 240,000; Full time

Job summary

The University of Kansas Health System is seeking an Assistant General Counsel for IT & Privacy to guide enterprise technology strategy, data governance, privacy, and responsible innovation. You will serve as a trusted advisor to executive leadership on technology-enabled transformation while ensuring compliance with HIPAA, privacy laws, and regulatory requirements.

Responsibilities include negotiating complex software licenses and data agreements, shaping enterprise policies, and overseeing AI

Qualifications

• J.D. from ABA-accredited law school.
• 10+ years in law firm and/or in-house legal department.
• Experience negotiating complex technology and data-related agreements and managing regulatory risk.

Responsibilities

• Provide strategic legal counsel on enterprise IT, privacy, data governance, and digital health initiatives.
• Negotiate complex software licenses, SaaS/PaaS agreements, data processing agreements, and vendor partnerships.
• Advise on HIPAA, privacy laws, and cross-border data transfer compliance.

Skills

Analytical skills

Negotiation

Drafting

Education

Juris Doctor

Tools

Microsoft Office 365

Job description

Position Summary / Career Interest:

The Assistant General Counsel — IT & Privacy provides strategic and operational legal support for information technology, data governance, privacy, and digital innovation initiatives across a complex healthcare enterprise. This role serves as a key advisor to executive leadership and enterprise teams on technology-enabled transformation, ensuring compliance with applicable laws while enabling responsible innovation, operational efficiency, and mission-aligned growth. This position requires seasoned attorney skills applied to a specialized IT and privacy practice. The role emphasizes negotiation of complex technology contracts and transactions, data governance, artificial intelligence, digital health, research enablement, and regulatory risk management in a highly regulated industry. The Assistant General Counsel — IT & Privacy joins an engaged legal team that functions both independently and collaboratively under the leadership of the health system’s Senior Vice President and General Counsel.

Responsibilities and Essential Job Functions

• Provides legal counsel on enterprise IT initiatives, including cloud services, SaaS platforms, electronic health record integrations, digital health tools, telehealth solutions, mobile applications, and advanced analytics technologies.
• Drafts, reviews, and negotiates complex commercial technology agreements, including software licenses, SaaS and PaaS agreements, data use and data processing agreements, technology development agreements, and strategic vendor partnerships.
• Advises IT, digital, and operational leaders on data rights, intellectual property strategy, cybersecurity, patient safety, operational risk, and regulatory compliance.
• Supports optimization of technology to improve efficiency, consistency, and speed to execution while maintaining appropriate compliance and risk mitigation through policy and governance.
• Advises on compliance with federal, state, and international privacy and data protection laws, including HIPAA, state consumer privacy laws, and cross-border data transfer requirements.
• Supports development, implementation, and maintenance of enterprise policies and standards governing data use, data sharing, de-identification, secondary use, and retention.
• Partners with privacy, security, compliance, risk/claims, and operational teams to evaluate and respond to privacy incidents, security events, and regulatory reporting obligations.
• Provides legal guidance on third-party data sharing, vendor risk management, and information governance structures.
• Advises on legal and regulatory considerations related to artificial intelligence and emerging technologies, including ethical use, risk mitigation, transparency, and governance.
• Supports enterprise AI governance frameworks, including policy development, committee participation, and review of AI-enabled technology incidents or events.
• Counsels business and clinical leaders on responsible deployment of AI technologies in operational, research, and patient-facing contexts.
• Provides legal support for research, innovation, and commercialization initiatives, including compliance with human subject research requirements and data use restrictions.
• Negotiates industry-sponsored and investigator-initiated clinical trial agreements, data licenses, material transfer agreements, and research collaboration agreements.
• Advises on compliant data commercialization and monetization strategies, balancing innovation, regulatory obligations and reputational risk considerations.
• Identifies, assesses, and mitigates legal risks associated with technology, data use, privacy, and digital initiatives.
• Supports dispute resolution related to technology vendors, data partners, and digital initiatives, including negotiation, alternative dispute resolution, and management of outside counsel.
• Monitors and interprets regulatory developments, enforcement activity, and industry trends affecting technology, privacy, AI, and digital health, and translates them into practical guidance for stakeholders.
• Serves as a trusted advisor to executive leadership, IT leadership, compliance, privacy, research, and operational teams.
• Leads or participates in cross-functional workgroups to develop policies, improve processes, and address enterprise-wide risk issues.
• Mentors and supports the professional development of legal team members on technology, privacy, and emerging technology matters.
• Manages outside counsel relationships to ensure quality legal services, alignment with organizational objectives and outside counsel policies, and cost-effective service delivery.
• Must exhibit professional competencies and demonstrate commitment to the organization’s vision, mission, and core values. Other duties may be assigned.
• Must be able to perform the professional, clinical and or technical competencies of the assigned unit or department.
• These statements are intended to describe the essential functions of the job and are not intended to be an exhaustive list of all responsibilities. Skills and duties may vary dependent upon your department or unit. Other duties may be assigned as required.

Required Education and Experience

• Juris Doctor From an ABA-accredited law school
• 10 or more years of experience in a law firm and/or in-house legal department.
• Demonstrated experience negotiating complex, high-value technology and data-related agreements and transactions; advising on data use and privacy compliance; and mitigating regulatory risk in a complex organizational environment that seeks to optimize technology use and lead in discovery and innovation.

Preferred Education and Experience

• 10 or more years Experience in healthcare law and intellectual property.
• 10 or more years Experience in healthcare, digital health, life sciences, or other highly regulated industries.
• 10 or more years Experience developing or advising on enterprise-wide governance frameworks, policies, or compliance programs.
• 10 or more years Familiarity with artificial intelligence, data analytics, and emerging technology use in operational or research settings.

Required Licensure and Certification

• License to Practice Law – State Bar Association Admission in good standing to the Kansas Bar OR
• License to Practice Law – State Bar Association Admission in good standing to another state bar with eligibility for in-house registration in Kansas.

Knowledge Requirements

• Strong analytical, negotiation, and drafting skills with the ability to communicate complex legal concepts in practical terms.
• Ability to work independently and manage multiple matters under tight deadlines in a fast-paced environment.
• Demonstrated judgment in advising on novel or evolving legal issues.
• Proficiency in Microsoft Office 365.
• Combination of law firm and in-house legal experience preferred.

We are an equal employment opportunity employer without regard to a person’s race, color, religion, sex (including pregnancy, gender identity and sexual orientation), national origin, ancestry, age (40 or older), disability, veteran status or genetic information.