Data Privacy Officer - Counsel - US Specialty Care

Sanofi - Bridgewater, NJ

Bridgewater, NJ

Professional, Scientific, and Technical Services

About the position

As Data Privacy Officer - Counsel - US Specialty Care at Sanofi, you will oversee the data protection and privacy strategies, breach notification and data loss prevention process, ensure compliance with global and US privacy/AI laws, provide data privacy legal guidance, manage risk assessments, and collaborate with cross-functional teams to implement privacy best practices. We are an innovative global healthcare company with one purpose: to chase the miracles of science to improve people's lives. We're also a company where you can flourish and grow your career, with countless opportunities to explore, make connections with people, and stretch the limits of what you thought was possible.

Responsibilities

• Serve as internal Privacy Counsel for the US market.
• Expert knowledge of data protection, information security, breach notification, data privacy policies and procedures, in compliance with GDPR, HIPAA, current State Privacy Laws in the US.
• Conduct data privacy impact assessments for projects/products within scope.
• Manage privacy and breach requirements including investigation, reporting, and remediation in accordance with regulatory requirements.
• Liaise with regulatory bodies and internal stakeholders to address any data privacy concerns or compliance issues.
• Provide training and support to US Specialty Care teams on data privacy best practices and leading data privacy implementation of new state laws.
• Ensure documentation and records of data processing activities are maintained accurately for audit purposes.

Requirements

• Juris Doctor (JD) from an accredited US law school, preferably with a focus in data privacy, cybersecurity, and breach notification.
• In depth knowledge of U.S. State and federal privacy laws/regulations (CCPA, HIPAA), data breach notification regulations and familiarity with AI regulations.
• Previous privacy/AI/breach notification/cybersecurity law, data loss prevention experience in a law firm.
• Healthcare experience, specifically providing product counseling to Product Management in the dermatology, immunology, respiratory space, or technology product/marketing teams.
• Relevant privacy certifications (CIPP-US).
• Strong Relationship-building, collaboration and working across functionally.
• Excellent communication skills, both written and verbal, with the ability to convey complex legal concepts to non-experts.

Benefits

• High-quality healthcare.
• Prevention and wellness programs.
• At least 14 weeks' gender-neutral parental leave.