Senior Privacy and AI Counsel

Abby Care

Senior Privacy & AI Counsel managing privacy governance and AI compliance at Abby Care. Responsible for leading privacy and AI programs, ensuring HIPAA and state law compliance.

Posted 6/24/2026full-timeSan Francisco • California • 🇺🇸 United StatesSenior💰 $180,000 - $250,000 per yearWebsite

About the role

Key responsibilities & impact

Own Abby Care's privacy program — HIPAA compliance, state privacy law compliance, BAA program, data mapping and ROPA, privacy incident response, breach assessment and notification, and individual rights workflows — including its design, operation, measurement, and continuous improvement.
Own Abby Care's AI governance program — the responsible AI policy suite, AI inventory, AI use case intake and review process, model risk classification, ongoing monitoring, and AI incident response — and evolve it as the regulatory and deployment landscape shifts.
Lead AI use case reviews for internal generative and agentic AI tools and for AI-powered features in Abby Care's product, including chart update, documentation extraction, and clinical decision support. Set the SLAs and the review framework; escalate the hard cases to the GC.
Set regulatory change management strategy across federal and state privacy and AI law. Translate horizon scanning into program and product decisions, not just memos.
Own the BAA program end-to-end, including standard templates, fallback positions, vendor risk integration, and downstream subcontractor flow-downs.
Serve as the senior legal partner to Product, Engineering, Operations and Clinical teams on the privacy and AI implications of new and existing features. Review PRDs, design documents, and model cards; sit in design reviews; influence the roadmap.
Lead privacy and AI incident response, including investigation, breach analysis, regulator and individual notification, and post-incident program remediation.
Prepare the privacy and AI sections of the Board package, with the General Counsel.
Manage outside privacy and AI counsel relationships, including scope, budget, and quality of work product.
Hire, develop, and lead the privacy and AI team as it grows.
Partner with the General Counsel and Compliance leadership on Privacy Officer designation, training and awareness programs, and the integration of privacy and AI controls into the broader compliance program.

Requirements

What you’ll need

JD from an accredited law school and active bar membership in good standing in at least one U.S. jurisdiction.
7+ years of legal experience, in-house or at a top law firm, with substantial privacy and AI work. In-house experience at a healthcare or healthcare technology company strongly preferred.
Deep working command of HIPAA/HITECH — including the Privacy, Security, and Breach Notification Rules — and a demonstrated track record of building HIPAA Privacy programs.
Deep working command of U.S. state privacy laws and the emerging U.S. state AI law landscape.
Demonstrated track record of building or materially rebuilding an AI governance program — responsible AI policy design, AI use case review framework, model risk classification, and AI-related product review — not just operating an inherited one.
Demonstrated experience leading privacy incident response end-to-end, including regulator-facing notification and post-incident remediation.
Strong written communication and the credibility to take and defend a position with executives, the Board, regulators, and outside counsel.
Comfort operating in a fast-growth environment with imperfect data, parallel priorities, and the need to write the policy yourself before handing it off.

Benefits

Comp & perks

Competitive compensation packages that reflect the value you bring. We reward our team for the impact of their work – full-time employees are eligible for an annual company performance bonus.
Comprehensive health coverage that works for you. We cover 90% of your premiums and 70% for your dependents, with multiple PPO plan options to choose from for medical, vision, dental, life, and short-term disability.
Generous paid time off. We provide policies that allow you to recharge along with 10 paid company holidays.
Team bonding. We love bringing our teams together. As a full-time employee, you’ll get to connect, collaborate, and have fun through team activities and our annual company retreat.
Financial savings benefits to support your future. We support your financial well-being with HSA contributions, optional FSA and commuter benefits, and full coverage of all 401(k) account fees (employer match not currently offered).
Paid parental leave to support your growing family. We provide paid leave, so you can focus on bonding and adjusting to life as your family grows.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

HIPAA compliancestate privacy law complianceBAA programdata mappingROPAAI governancemodel risk classificationprivacy incident responsebreach assessmentregulatory change management

Soft Skills

strong written communicationleadershipcollaborationinfluencecredibilityproblem-solvingadaptabilityteam developmentstrategic thinkingstakeholder management

Certifications

JD from an accredited law schoolactive bar membership