Privacy Counsel (661102) at Zimmer US in Warsaw, Indiana

Job Description:

Job Summary

Zimmer Biomet is a world leader in musculoskeletal health solutions. Our team members are part of a company with a heritage of leadership, a focus on shaping the future, and a mission dedicated to alleviating pain and improving the quality of life for people around the world. As a member of the Zimmer Biomet Legal Department , the Privacy Counsel will support the legal function to ensure compliance with relevant multinational privacy laws and regulations. Will support the Global Privacy program by providing Team Members with clear policies, education and counseling, risk mitigation and efficient systems so that they may achieve their business goals consistent with privacy law and the company’s privacy standards.

Principal Duties and Responsibilities

• Work with the Global Privacy Officer, ensuring company’s compliance with the HIPAA, the General Data Protection Regulation, and data protection laws and regulations outside of the EU, FTC, and State Privacy • Carry out the direction and strategy for the Global Privacy program, including providing guidance on applicable Privacy laws and regulations, implementation of the Global Privacy Program, including company policies and processes covering the privacy and access of personally identifiable information in accordance with global, federal, state and local laws. • Participate in new business initiatives and product development activities to identify and escalate privacy considerations. • Provide counsel on contractual protections related to data analytics. • Provide privacy education and training programs and initiatives. • Enhance effective systems for monitoring, auditing, and measure the effectiveness of the Global Privacy program in order to identify successes, potential areas of privacy vulnerability, risks and areas for further improvement, and develop a mitigation process to protect the company and its businesses and functions and ensure compliance. • Support the privacy impact assessment process to review privacy impacts of various company initiatives. Work collaboratively with other departments to mitigate privacy risks. • Monitor the data request and usage processes and cross border data transfer matters for personally identifiable data across the company, including mechanisms to track and report upon data usage and sharing. • Negotiate and provide guidance about business associate agreements, licensing and distribution agreements, mergers and acquisition agreements, in collaboration with the businesses and regions to address privacy-related issues and concerns. • Assist with privacy compliance reviews or investigations. • Work with company personnel, legal counsel, and other related parties to represent the Company’s privacy interests with external parties (e.g., government bodies, trade associations) who undertake to adopt or amend privacy legislation, regulations, or standards. • Continue knowledge of current privacy regulations, including contractual and operational issues involving HIPAA, the General Data Protection Regulation, and other regulations and laws affecting a global healthcare company, and assist businesses and regions to adapt business practices when necessary to ensure compliance. • Develop external contacts and participate in professional organizations that will provide benchmarks for the global privacy program and enhance the understanding of the external environment in order to anticipate new trends and developments in the privacy field. This is not an exhaustive list of duties or functions and might not necessarily comprise all of the essential functions for purposes of the Americans with Disabilities Act.

Expected Areas of Competence

• Develops close working relationships with clients in which corporate goals and priorities are maintained without compromising legal integrity. • Communicates effectively to a diverse audience, at multiple levels within the Company, through various formats, i.e. presentations, written proposals, reports, correspondence, leading meetings, face-to-face dialogue, etc. • Possesses knowledge of business processes within the industry, including, product development and approval, manufacturing, marketing and selling. • Understands public policy and healthcare industry developments, the legislative and liability implications of business decisions. • Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals • Demonstrated skills in verbal communication and listening • Comfortable and adept in dealing with ambiguity • Strong project management experience and skills • Demonstrated ability to operate in a complex, rapidly changing environment • Excellent writing skills • A high level of integrity and trust • Knowledge of HIPAA, state and federal guidelines on privacy, transactions and security • Advanced understanding of global privacy trends, best practices and legal and regulatory requirements, including the General Data Protection Regulation • Demonstrated ability to identify and analyze issues, and think critically to resolve problems • Ability to form solid assumptions and formulate decisions and recommendations from diverse facts and information • Extensive familiarity with health care relevant legislation and standards for the protection of health information and patient privacy • Health care legal, operational, and or financial skills.

Education/Experience Requirements

• JD required, plus a minimum of 2-3 years of work experience, including at least 2 years of experience in a privacy compliance role. • Working experience in an AmLaw 100 firm and/or Fortune 500 environment in an attorney role is strongly preferred.

Travel Requirements

Up to 20%

Additional Information

EOE/M/W/Vet/Disability At Zimmer Biomet, we believe in The Power of Us, which means that we are stronger together. We are committed to creating an environment where every team member feels included, respected, empowered, and celebrated.