The UnitedHealth Group (UHG) Enterprise Privacy Office is seeking a Staff Counsel, Privacy to support its mission of helping make the health system work better for everyone. This role requires a strong working knowledge of the HIPAA Privacy Rule, state privacy laws, and the ability to collaborate effectively with business partners across a large, matrixed organization. This position supports UnitedHealthcare, a leading health benefits company providing medical insurance and related services to individuals, employers, and government sponsored programs, including Medicare and Medicaid. This role is well suited for a privacy attorney with experience advising health plans and navigating complex regulatory environments. The Staff Counsel, Privacy reports to the UnitedHealthcare Senior Associate General Counsel and works closely with colleagues across the Enterprise Privacy Office to provide practical, business-focused privacy guidance.
You'll enjoy the flexibility to work remotely* from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.
Primary Responsibilities:- Serve as a trusted privacy advisor to UnitedHealthcare, with a primary focus on HIPAA and state privacy law compliance
- Advise marketing and product teams by reviewing initiatives, materials, and workflows for privacy and data protection considerations
- Own and manage updates to UHC health plan Notices of Privacy Practices, Online Services Privacy Policy, and related notices, including coordination and rollout to impacted business areas
- Operationalize health plan specific privacy programs, including training, communications, policies, and procedures
- Provide privacy guidance in support of business associate agreements and other contracting matters, in collaboration with contracting and procurement teams
- Advise on regulatory change management and support the implementation of new and updated federal and state privacy requirements
- Advise on and respond to privacy related requests for proposals, customer and regulator audits, and compliance reviews
- Partner closely with cross functional stakeholders across UnitedHealthcare's lines of business to balance legal risk and business priorities
- Operate effectively in a fast paced, high growth environment while exercising sound judgment
You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.
Required Qualifications:- Juris Doctor (J.D.) Degree
- Active license to practice law in current state of residence
- 3+ years of experience practicing health care privacy law in a large corporation, law firm, or government agency
Preferred Qualifications:- Certified Information Privacy Professional (CIPP) designation or similar
- Familiarity with AI tools such as Copilot
- Demonstrated ability to work independently on matters with minimal supervision
- Excellent legal research, writing, verbal communication, and presentation skills
- Solid interpersonal skills, with the ability to build and maintain effective working relationships in a large organization
*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy.
Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $91,700 to $163,700 annually based on full-time employment. We comply with all minimum wage laws as applicable.
Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.
