Corporate & Regulatory Counsel- Privacy

MedPro Group; Springfield (MA); On-site; USD 125,000 - 175,000; Full time

Job summary

Wellfleet seeks an experienced Corporate & Regulatory Counsel to support the legal team in privacy compliance and regulatory matters for a nationwide health/accident insurer. You will advise on HIPAA, FERPA, GLBA, CCPA/CPRA, lead data breach response, review vendor and technology agreements, and help shape privacy governance across the organization.

You will collaborate with Compliance, IT, Operations, Procurement and business leaders to translate legal requirements into practical, scalable

Qualifications

• J.D. from an accredited law school and admitted to practice law and in good standing with at least one state bar
• Privacy certification such as CIPP is strongly preferred
• 5+ years of relevant legal experience with significant focus on privacy compliance, preferably within an in-house legal/compliance department
• Demonstrate a strong understanding of applicable insurance laws and regulations, including HIPAA/HITECH, FERPA, GLBA, and CCPA/CPRA
• Demonstrated expertise on data incident and breach response
• Experience working closely with Information Security or Technology teams
• Demonstrated experience reviewing and negotiating privacy provisions in commercial agreements
• Experience working on cross-functional teams and tackling a broad range of issues in a fast paced and rapidly scaling environment
• Excellent legal research skills and proven ability to articulate and quickly deliver information to business stakeholders
• Capable of efficiently managing multiple tasks and competing priorities in a fast-paced environment
• Excellent organizational skills, including thorough and complete follow-up to all time sensitive items
• Strong verbal, written communication, presentation and negotiation skills
• Outstanding attention to detail with the ability to understand complex problems, identify root causes and effectively problem-solve
• Excellent analytical skills, with the ability to effectively identify, communicate, and address potential issues
• Demonstrate a high level of personal integrity, professionalism, intellectual curiosity, and a readiness to develop further
• Ability to motivate team members and provide direction to drive success
• Work effectively both independently and as part of a team.

Responsibilities

• Serve as subject matter expert and primary legal counsel on privacy compliance matters across the organization
• Advise on compliance with HIPAA, HITECH, FERPA, GLBA, CCPA/CPRA and related state and federal healthcare privacy requirements
• Advise on data incident and breach response, including risk assessments, regulatory notifications, remediation strategies, and coordination with internal and external stakeholders
• Review, draft and negotiate privacy provisions in vendor, TPA, technology and business partner agreements
• Support and refine privacy governance frameworks, including policies, procedures, training programs and audits
• Partner with Compliance, Audit, Information Security, IT, Operations, Product and Vendor Management teams to translate legal requirements into practical, operationally workable solutions
• Monitor regulatory developments and enforcement trends affecting health care privacy and insurance data
• Assist with privacy-related inquiries from regulators, customers, partners, and internal stakeholders
• Assess privacy issues for new products, processes and technologies, and support cross-functional teams with mitigation strategies
• Support data mapping, classification, management and governance activities across the organization
• Support other enterprise-wide privacy matters as assigned by the Wellfleet CLO or MedPro Group General Counsel
• Exercise strong business acumen and analyze legal issues from the business perspective
• Work closely with cross-functional team members and business leaders to review legal issues and implications of potential business decisions and initiatives
• Work closely with business leaders and the Procurement team on a broad range of commercial agreements across all lines of business and corporate areas, including vendor and TPA contracts, service agreements, technology contracts and other deals and complex transactions
• Provide contract-related training, peer review and coaching to colleagues as needed
• Establish and improve contract processes, templates and playbooks to enhance efficiency, compliance and scalability
• Serve as a resource for internal stakeholders on a variety of applicable laws impacting health plans
• Actively exemplify personal integrity, uphold the highest standards of professionalism, and consistently demonstrate ethical conduct.
• Manage tasks and assignments efficiently and effectively to meet deadlines with high urgency
• May manage staff, and as applicable, conduct 1:1 weekly (or bi-weekly) “check-ins” with direct reports to establish expectations and ensure accountability regarding priorities and goals
• Establish and maintain a supportive learning environment by ensuring continuous development, training, and growth
• Coach and mentor team members by identifying areas of improvement by providing timely and constructive feedback. Gives direction to support team members and drives success
• Perform other duties as assigned.

Skills

Privacy compliance

Regulatory compliance

Contract review

Legal research

Cross-functional collaboration

Data privacy

Education

J.D. from an accredited law school and admitted to practice law

Job description

Wellfleet, a Berkshire Hathaway company, delivers customer-centric accident and health insurance, with quality service and uncompromising ethics. Wellfleet works to protect people against risk throughout every stage of life – from grade school to college to the workplace.

Founded in 1993 as Consolidated Health Plans (CHP), Wellfleet, headquartered in Springfield, Mass., is one of the nation’s leading providers of health and accident insurance products to the higher education market.

Wellfleet, a Berkshire Hathaway Company, seeks an experienced Corporate & Regulatory Counsel to support the Wellfleet legal team.

The Corporate & Regulatory Counsel is responsible for supporting a nationwide accident and health insurance carrier by serving as a key legal advisor on state and federal privacy compliance matters across the organization, with a particular focus on healthcare data, regulatory compliance, operational implementation and incident response. In addition, this role will provide subject matter expertise in privacy compliance and facilitate effective collaboration and coordination with relevant internal and external stakeholders.

In this role, you will…

• Serve as subject matter expert and primary legal counsel on privacy compliance matters across the organization
• Advise on compliance with HIPAA, HITECH, FERPA, GLBA, CCPA/CPRA and related state and federal healthcare privacy requirements
• Advise on data incident and breach response, including risk assessments, regulatory notifications, remediation strategies, and coordination with internal and external stakeholders
• Review, draft and negotiate privacy provisions in vendor, TPA, technology and business partner agreements
• Support and refine privacy governance frameworks, including policies, procedures, training programs and audits
• Partner with Compliance, Audit, Information Security, IT, Operations, Product and Vendor Management teams to translate legal requirements into practical, operationally workable solutions
• Monitor regulatory developments and enforcement trends affecting health care privacy and insurance data
• Assist with privacy-related inquiries from regulators, customers, partners, and internal stakeholders
• Assess privacy issues for new products, processes and technologies, and support cross-functional teams with mitigation strategies
• Support data mapping, classification, management and governance activities across the organization
• Support other enterprise-wide privacy matters as assigned by the Wellfleet CLO or MedPro Group General Counsel
• Exercise strong business acumen and analyze legal issues from the business perspective
• Work closely with cross-functional team members and business leaders to review legal issues and implications of potential business decisions and initiatives
• Work closely with business leaders and the Procurement team on a broad range of commercial agreements across all lines of business and corporate areas, including vendor and TPA contracts, service agreements, technology contracts and other deals and complex transactions
• Provide contract-related training, peer review and coaching to colleagues as needed
• Establish and improve contract processes, templates and playbooks to enhance efficiency, compliance and scalability
• Serve as a resource for internal stakeholders on a variety of applicable laws impacting health plans
• Actively exemplify personal integrity, uphold the highest standards of professionalism, and consistently demonstrate ethical conduct.
• Manage tasks and assignments efficiently and effectively to meet deadlines with high urgency
• May manage staff, and as applicable, conduct 1:1 weekly (or bi-weekly) “check-ins” with direct reports to establish expectations and ensure accountability regarding priorities and goals
• Establish and maintain a supportive learning environment by ensuring continuous development, training, and growth
• Coach and mentor team members by identifying areas of improvement by providing timely and constructive feedback. Gives direction to support team members and drives success
• Perform other duties as assigned.

We are looking for candidates with…

• J.D. from an accredited law school and admitted to practice law and in good standing with at least one state bar
• Privacy certification such as CIPP is strongly preferred
• 5+ years of relevant legal experience with significant focus on privacy compliance, preferably within an in-house legal/compliance department
• Demonstrate a strong understanding of applicable insurance laws and regulations, including HIPAA/HITECH, FERPA, GLBA, and CCPA/CPRA
• Demonstrated expertise on data incident and breach response
• Experience working closely with Information Security or Technology teams
• Demonstrated experience reviewing and negotiating privacy provisions in commercial agreements
• Experience working on cross-functional teams and tackling a broad range of issues in a fast paced and rapidly scaling environment
• Excellent legal research skills and proven ability to articulate and quickly deliver information to business stakeholders
• Capable of efficiently managing multiple tasks and competing priorities in a fast-paced environment
• Excellent organizational skills, including thorough and complete follow-up to all time sensitive items
• Strong verbal, written communication, presentation and negotiation skills
• Outstanding attention to detail with the ability to understand complex problems, identify root causes and effectively problem-solve
• Excellent analytical skills, with the ability to effectively identify, communicate, and address potential issues
• Demonstrate a high level of personal integrity, professionalism, intellectual curiosity, and a readiness to develop further
• Ability to motivate team members and provide direction to drive success
• Work effectively both independently and as part of a team.

Why Wellfleet?

Here at Wellfleet, we foster a culture of growth that enables engaged and high-performing professionals to be empowered to deliver our mission and vision.

Our employees are a team devoted to providing customer service that exceeds expectations of our members and clients. Successful team members continually look for ways to improve product delivery and value.

Wellfleet offers a competitive compensation package and comprehensive benefits package including life, health and dental, vision, 401K retirement plan, short- and long-term disability coverage, flexible/dependent care spending account, tuition reimbursement, and business casual dress.

General:

Wellfleet is part of the MedPro Group family. As such, all Wellfleet team members are employees of MedPro Group Inc. We are an Equal Opportunity Employer. The annual gross base salary range is $125,000 to $175,000. This range anticipates the low and high end of the salary for this position. Actual salaries will vary and are based on factors such as a candidate’s qualifications, skills and competencies. Salary is one component of Wellfleet’s total compensation and benefits package, which includes medical, vision and dental insurance options, life and accident insurance, 401(k), and short-term and long-term disability insurance. For a more detailed overview, visit our careers website at: wellfleetinsurance.com/about/careers. #LI-KS1 #LI-Remote