Associate Director, Privacy Counsel

Foundation Medicine, Inc.; Morrisville (NC); On-site; USD 195,000 - 244,000; Full time

Job summary

Foundation Medicine, Inc. seeks an Associate Director, Privacy Counsel to lead FMI's privacy program and advise across business, research, and clinical stakeholders. You will interpret U.S.

and international data protection laws, shape privacy strategy, and guide partners in data use decisions. You will collaborate with legal, compliance, product, and information security teams, manage outside counsel, and drive policy development, incident response, and training to protect patient and research

Qualifications

• Juris Doctor (JD) degree from an accredited law school and active U.S. bar membership in good standing.
• 7+ years of progressive legal experience, with at least 5 years working in data privacy law advising healthcare or life sciences organizations.
• CIPP/US or CIPP/E certification preferred but not required.

Responsibilities

• Serve as a privacy subject matter expert for FMI, providing legal guidance on privacy matters with minimal reliance on outside counsel
• Maintain deep, current knowledge of applicable U.S. and exU.S. privacy laws, particularly in healthcare, genetic privacy, research, and biopharma collaboration contexts
• Advise FMI on matters related to informed consent, HIPAA authorization, research protocols, and secondary data use
• Advise FMI on de-identification, pseudonymization, and anonymization standards and evolving regulatory expectations
• Support investigation, analysis, remediation, and notification activities related to privacy and cybersecurity incidents
• Support legal colleagues in drafting, reviewing, and negotiating data use and data protection terms in commercial agreements, vendor agreements, data sharing agreements (e.g., BAAs, DPAs, DUAs), research agreements, clinical trial agreements, and other collaboration agreements
• Collaborate closely with the privacy team and broader legal and compliance department to advance and continually improve FMIs privacy program, including assisting with the development of policies, procedures, training, and awareness activities
• Participate in certain internal FMI committees as a standing team member
• Prepare materials and make presentations, as necessary or requested
• Independently triage workflow, set clear priorities and expectations with stakeholders, and efficiently deliver results
• Manage and coordinate with outside privacy counsel, as needed on a case-by-case basis
• Other duties as assigned
• Comply with FMI's attendance policies

Skills

Privacy law

HIPAA/GDPR expertise

Legal drafting

Education

Juris Doctor (JD) degree

US bar membership

CIPP/US or CIPP/E certification

Job description

Foundation Medicine, Inc.

Associate Director, Privacy Counsel

• 400 Summer Street, Boston, Massachusetts, United States
• Full Time

About the Job:

The Associate Director, Privacy Counsel plays a critical leadership role within FMIs privacy program and serves as a trusted advisor across FMIs operations. This role is responsible for independently interpreting and advising on U.S. and exU.S. data protection laws, including HIPAA (as a Covered Entity), GDPR, U.S. state consumer and genetic privacy laws, and related regulatory frameworks. This role exercises significant judgment and autonomy in guiding business, clinical, research, and commercial stakeholders, and in shaping and operationalizing FMIs enterprise privacy strategy. The Associate Director, Privacy Counsel partners closely with legal, compliance, product, commercial, medical, information security, marketing, and business teams to enable responsible data use while protecting patient, customer, and research participant trust.

Key Responsibilities:

• Serve as a privacy subject matter expert for FMI, providing legal guidance on privacy matters with minimal reliance on outside counsel
• Maintain deep, current knowledge of applicable U.S. and exU.S. privacy laws, particularly in healthcare, genetic privacy, research, and biopharma collaboration contexts
• Advise FMI on matters related to informed consent, HIPAA authorization, research protocols, and secondary data use
• Advise FMI on de-identification, pseudonymization, and anonymization standards and evolving regulatory expectations
• Support investigation, analysis, remediation, and notification activities related to privacy and cybersecurity incidents
• Support legal colleagues in drafting, reviewing, and negotiating data use and data protection terms in commercial agreements, vendor agreements, data sharing agreements (e.g., BAAs, DPAs, DUAs), research agreements, clinical trial agreements, and other collaboration agreements
• Collaborate closely with the privacy team and broader legal and compliance department to advance and continually improve FMIs privacy program, including assisting with the development of policies, procedures, training, and awareness activities
• Participate in certain internal FMI committees as a standing team member
• Prepare materials and make presentations, as necessary or requested
• Independently triage workflow, set clear priorities and expectations with stakeholders, and efficiently deliver results
• Manage and coordinate with outside privacy counsel, as needed on a case-by-case basis
• Other duties as assigned
• Comply with FMI's attendance policies

Qualifications:

Basic Qualifications:

• Juris Doctor (JD) degree from an accredited law school and active U.S. bar membership in good standing
• 7+ years of progressive legal experience, with at least 5 years working in data privacy law advising healthcare or life sciences organizations

Preferred Qualifications:

• Prior experience at a top-tier law firm
• Prior in-house privacy experience at a healthcare company or institution (e.g., diagnostics, medical device, pharma/biotech, hospital system, healthcare provider)
• Experience advising business and legal colleagues on data privacy laws, regulatory guidance, and industry guidelines, including but not limited to HIPAA, GDPR, the Federal Trade Commission (FTC) Act, CCPA and other state privacy laws, and genetic information privacy and security laws
• Experience working in privacy program at a HIPAA Covered Entity or advising HIPAA Covered Entity clients on privacy matters
• Experience working in a privacy program of a Controller that complied with GDPR or advising clients on GDPR compliance matters
• CIPP/US or CIPP/E certification
• Ability to apply a risk-based analysis to privacy issues and demonstrate creativity and flexibility in developing solutions that satisfy both business requirements and legal obligations
• Demonstrated ability to prioritize numerous requests for assistance and offer superior advice in a timely, thoughtful, and complete manner
• Ability to:
  • establish and maintain strong relationships within FMIs business and legal teams;
  • engage professionally with colleagues at all levels, including external partners, and to influence outcomes through effective leadership skills; and
  • work in a dynamic, evolving, and fast-paced work environment, with the confidence and abilities to work independently
• Strong analytical skills and attention to detail
• Excellent collaboration and influencing skills
• Superior judgment and rigor in relation to problem‑solving and appropriate escalation of issues
• Excellent written and oral communication and presentation skills
• High level of integrity and trust
• Understanding of HIPAA and the importance of patient data privacy
• Commitment to reflect FMIs values: Integrity, Courage, and Passion

The expected salary range for this position based on the primary location of Boston, MA is $195,300 - $244,200 per year. The salary range is commensurate with Foundation Medicines compensation practice and considers factors including, but not limited to, education, training, experience, external market conditions, criticality of role, and internal equity. A discretionary annual bonus may be available based on individual and Company performance. This position also qualifies for Foundation Medicine's benefits.

#LI-Onsite

Equal employment opportunity, including veterans and individuals with disabilities.