Data Privacy Compliance Specialist

DeepHealth; United States; Hybrid; USD 70,000 - 110,000; Full time

Job summary

DeepHealth seeks a Data Privacy Compliance Specialist to support its global privacy program, including HIPAA and GDPR. You will help ensure personal data is collected, stored, and processed in line with applicable laws and DeepHealth requirements.

You will collaborate across product, engineering and operations to implement Privacy by Design, DPAs, and data transfer assessments, while maintaining documentation for audits and regulatory readiness.

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• Minimum of 2 years of experience in a regulated industry; medical device experience preferred.
• Strong knowledge of GDPR and HIPAA.
• Excellent written and oral communication skills.
• Experience supporting privacy assessments, DPAs, or Privacy by Design activities welcome.

Responsibilities

• Support privacy programs and help ensure compliance with applicable local, national, and global privacy laws.
• Assist with the Privacy by Design program supporting product development and modification, including software and AI use cases.
• Collaborate with Vendor Management on DPAs and Transfer Impact Assessments as applicable.
• Research and review country-specific privacy frameworks to support compliance and business opportunities.
• Collaborate cross-functionally to implement technical and organizational measures that support data privacy.
• Monitor how personal data is collected, processed, and stored for compliance.

Skills

GDPR knowledge

HIPAA knowledge

Communication skills

Regulated industry experience

Education

Bachelor's degree or equivalent

Job description

The Data Privacy Compliance Specialist supports DeepHealth's global data privacy programs, including HIPAA and GDPR. Reporting to the Data Privacy Compliance Lead, this role collaborates across the organization to help ensure personal data is collected, processed, and stored in line with applicable privacy laws and DeepHealth requirements.

Essential Duties and Responsibilities

• Support organizational data privacy efforts and help ensure compliance with applicable local, national, and global privacy laws and regulations.
• Assist with the Privacy by Design program supporting product development and modification, including software and AI use cases.
• Collaborate with Vendor Management on vendor qualification and on implementation of Data Processing Agreements and Transfer Impact Assessments as applicable.
• Research and review country-specific data privacy frameworks and regulations to support continued compliance and business opportunities.
• Collaborate cross-functionally to implement technical and organizational measures that support data privacy.
• Monitor how personal data is collected, processed, and stored for compliance with applicable laws.
• Participate in investigations and impact assessments related to information security events with privacy implications.
• Serve as a backup point of contact for data protection authorities and data subjects, handling inquiries and requests.
• Collaborate cross-functionally to improve data privacy processes in support of risk management frameworks such as GDPR and HIPAA.
• Maintain clear documentation of privacy activities and support audit and regulatory readiness as assigned.

Minimum Qualifications, Education and Experience

• Bachelor's degree in a relevant field, or equivalent practical experience (required).
• Minimum of 2 years of experience in a regulated industry (required); medical device experience preferred.
• Software and/or Software as a Medical Device experience preferred.
• Strong knowledge of GDPR and HIPAA (required).
• Excellent written and oral communication skills (required).
• Preferred: Experience supporting privacy assessments, DPAs, or Privacy by Design activities.

Quality Standards

• Communicates, cooperates, and consistently functions professionally and harmoniously with all levels of supervision, co-workers, visitors and vendors.
• Demonstrates initiative, personal awareness, professionalism and integrity, and exercises confidentiality in all areas of performance.
• Follows all local, regional and country laws concerning employment.
• Follows all DeepHealth policies and procedures.
• Follows data privacy, compliance, safety and confidentiality standards at all times.
• Practices universal safety precautions.
• Promotes good public relations on the phone and in person.
• Adapts and is willing to learn new tasks, methods, and systems.
• Reports to work regularly as scheduled; consistently punctual with respect to working hours, meal and rest breaks, and maintains satisfactory personal attendance in accordance with DeepHealth guidelines.
• Completes job responsibilities in a quality and timely manner.

Travel

• This position requires travel up to approximately 10%.

Working Environment

• European Union. Remote-friendly office-based role.

Physical Demands

• The employee must be able to perform the essential duties and responsibilities of the position, with or without reasonable accommodation.