Hinge Health
Hinge Health
Hinge Health is a digital health company focused on virtual musculoskeletal care. Its app-based programs combine guided physical therapy, pelvic floor therapy, and support from physical therapists, health coaches, and orthopedic specialists. AI-enabled tools and 3D motion tracking help personalize the care experience, while the FDA-cleared Enso wearable provides drug-free pain relief. Hinge Health serves individual patients as well as employers and health plans through value-based, outcomes-focused programs.

Privacy and AI Counsel – Hinge Health, San Francisco Hybrid

Advise Hinge Health on privacy, AI governance, and compliance for AI-enabled musculoskeletal healthcare products. Partner with cross-functional teams on risk assessments, agreements, policies, and incident response.

Description

  • Partner with Product, R&D, Hardware, Marketing, and Clinical teams as they develop and launch healthcare products and services
  • Direct compliance efforts covering privacy and artificial intelligence laws and regulations
  • Evaluate privacy risks and establish AI governance policies and practical standards
  • Negotiate data security agreements and business associate agreements while reviewing privacy and AI provisions
  • Create and maintain privacy and AI policies and procedures in partnership with Compliance
  • Oversee privacy impact assessments and data protection impact assessments
  • Advise teams throughout the company on privacy and AI-related matters
  • Integrate privacy-by-design principles into Product and R&D planning and execution
  • Track and address privacy inquiries and complaints
  • Lead privacy incident response alongside Security and Compliance
  • Advise client-facing teams on privacy and AI questions and oversight requirements
  • Work with Security to confirm that appropriate data protection controls are implemented
  • Report to the Associate General Counsel, Product, collaborating with Legal & Compliance and other cross-functional stakeholders

Requirements

  • Juris Doctor degree from an accredited law school
  • Active license to practice law in at least one U.S. jurisdiction
  • Five to seven years of experience in privacy law and data protection
  • Deep knowledge of U.S. and international privacy requirements, including HIPAA, GDPR, and CCPA
  • Understanding of privacy considerations for artificial intelligence and machine learning, along with established AI governance practices
  • Certified Information Privacy Professional credential or comparable certification
  • Experience applying AI tools to improve and accelerate legal deliverables
  • Healthcare experience, ideally in digital health, combined with law firm experience at a nationally recognized firm
  • Ability to operate effectively at both strategic and operational levels
  • Demonstrated cross-functional collaboration and clear, business-oriented communication of complex legal and regulatory topics
  • Independent, proactive working style with comfort navigating ambiguity and changing priorities
  • Based in or willing to relocate to the San Francisco Bay Area
  • Willingness to work three days per week in the San Francisco office for a full typical eight-hour business day
  • Legal authorization to work in the United States

Benefits

  • Equity
  • Comprehensive medical, dental, and vision insurance
  • Support for gender-affirming care
  • Resources for family-building and fertility planning
  • Travel reimbursement when local healthcare access is unavailable
  • Traditional and Roth 401(k) retirement plan options
  • Two percent employer 401(k) match
  • Modern stipends for learning and professional development
  • Reasonable accommodations for candidates with disabilities

Related Jobs

LendingClub

Senior Assistant General Counsel, Consumer Finance Regulatory

LendingClub
1,001 – 5,000 Employees
H1B Visa SponsorBankingFinanceFintech

Provide regulatory counsel on consumer finance products, lending laws, examinations, complaints, and business agreements. Partner with LendingClub’s business, Compliance, and Risk teams to support operations and regulatory readiness.

Open