Data, Privacy and Cybersecurity –Mid Level Health & Life Sciences Associate

Hogan Lovells; Washington; On-site; USD 260,000 - 365,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Paid time off

Relocation assistance

Job summary

Hogan Lovells Data, Privacy and Cybersecurity practice seeks a mid‑level associate with approximately 3–5 years of experience in privacy and technology regulatory and advisory matters with a focus on health and life sciences. The role involves handling regulatory and advisory work and collaborating closely with attorneys and clients.

The position supports health industry clients and includes responsibilities such as HIPAA compliance, data use agreements, vendor risk practices, and cross‑border

Qualifications

• 3–5 years in privacy, technology regulatory counseling or related areas.
• Strong academic credentials and excellent research, writing, and oral communication skills.
• Membership in or eligibility for the D.C. Bar.
• Experience in health and life sciences privacy preferred.
• Ability to manage multiple deadlines and work across teams.
• Substantive writing sample related to privacy or technology matters.

Responsibilities

• Regulatory compliance and privacy advisory work across HIPAA and state health privacy laws.
• Assist clients with privacy compliance program enhancements and governance structures.
• Regulatory analysis of data uses and data flows.
• Draft and negotiate HIPAA BAA, DPA, AI agreements and privacy provisions in agreements.
• Support client counseling on privacy in product development and data usage, including cross‑border data flows.
• Manage discrete workstreams and participate in client calls and deliverables.

Skills

Privacy law

Regulatory counseling

Legal research

Written and oral comms

Education

Law degree

Job description

The Data, Privacy and Cybersecurity practice group seeks a mid‑level associate with approximately 3–5 years of experience in privacy and technology regulatory and advisory matters with a focus on health and life sciences. Our Data, Privacy and Cybersecurity practice consistently ranks among the nation’s best for expertise, legal ability, client service, and business understanding. We are looking for a candidate who demonstrates strong analytical skills, excellent judgment, and the ability to take ownership of significant workstreams while collaborating closely with attorneys and clients.

Our practice supports major industry players across the health and life sciences sector, including pharmaceutical and device manufacturers, technology companies, researchers, academic medical centers, insurers, labs, health care clearinghouses, and health care providers.

Primary Responsibilities

The associate will work on a wide range of privacy regulatory and advisory matters, including:

• Regulatory compliance , including development of privacy compliance programs to meet obligations under HIPAA, state health privacy and sensitive condition laws, GINA, the Part 2 regulations, and state AI and consumer health data privacy laws, such as policies and procedures, compliance documentation, consents, and notices.
• Assisting clients with privacy compliance program enhancements , such as governance structures, risk assessments, vendor/third‑party risk practices, and compliance documentation.
• Regulatory analysis such as advising clients on the legal implications and requirements associated with intended data uses and data flows.
• Agreement negotiation , including HIPAA business associate agreements, data processing and data use agreements, AI agreements, and privacy language in clinical trial and other research agreements.
• Supporting client counseling on privacy issues arising in product development, research and clinical trials, use of data to train AI models, use of AI tools and risks and guardrails for such, commercial transactions, and cross‑border data flows.
• Managing discrete workstreams and participating directly in client calls, presentations, and deliverables appropriate to a mid‑level associate.

Qualifications

• 3–5 years of experience in privacy, technology regulatory counseling, or related areas (law firm, government, or in‑house experience welcome).
• Strong academic credentials and excellent research, writing, and oral communication skills.
• Demonstrated ability to deliver clear, concise client‑ready work product in a fast‑paced environment.
• Membership in or eligibility for the D.C. Bar.
• Experience supporting privacy compliance and analysis in the health and life sciences space strongly preferred.
• Familiarity with health privacy laws, such as HIPAA, GINA, state health privacy and sensitive condition laws, state consumer health data privacy laws, and Part 2 regulations is a plus.
• Ability to manage multiple competing deadlines and work collaboratively across teams.
• Please include at least one substantive writing sample related to privacy or technology matters.

The expected base salary range for this role is $260,000 to $365,000 per year. This range reflects a good‑faith estimate of pay at the time of posting; the actual compensation offered may vary depending on factors such as the candidate’s qualifications. This position is eligible for additional forms of compensation, which may include annual performance bonuses and discretionary bonuses. Employees in this role are also eligible for benefits offered by the firm, subject to applicable plan terms and conditions, which currently include medical, dental, and vision insurance; a 401(k) retirement plan; and paid time off. Additional benefits may include relocation. Please review this link for more information regarding employee benefits in the United States.

We will consider for employment qualified applicants with arrest and conviction records in a manner consistent with the requirements of applicable law, including the San Francisco Fair Chance Ordinance and City of Los Angeles Fair Chance Initiative for Hiring Ordinance.

A resume or CV is a must for our application system. We also encourage you to include a cover letter to tell us why you are interested in this position and a law school transcript (or the equivalent). Candidates for lawyer opportunities in the U.S. must have a law degree from an ABA-accredited law school and be a member of the Bar in the United States.

This job description sets forth the responsibilities of this position and may be changed from time to time as shall be determined.

Hogan Lovells is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, age, national origin, disability, sexual orientation, gender identity or expression, marital status, genetic information, protected Veteran status, or other factors protected by law.

Hogan Lovells complies with federal and state disability laws and makes reasonable accommodations for applicants and candidates with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, please contact our Benefits Department at [e-mail].