Senior Privacy Counsel

Flo Health

Legal and Compliance are partners across the whole business here at Flo. They watch over everything: Flo’s privacy programme, compliance with regulatory obligations, contract management, IP enforcement you name it.

The team’s divided into three groups – Privacy & Data Protection, Regulatory & Compliance, and Legal Services, each managing its own area.

This role’s all about delivering on Flo’s continued commitment to data privacy by design. It’s a senior counsel position reporting directly to our new VP of Privacy and sits as part of a team of six doing some really exciting work.

Having recently achieved our ISO 27001 re-certification (the first business of our kind with it!), we’re pressing ahead with ISO 27701 as a next step. On top of that, we’ve just launched Anonymous mode (and made it open source) – a hugely important feature for our users, and one which this role will be key in supporting.

It doesn’t end there though, and this position will be key in enhancing DSARs, reviewing privacy policies and systems, and helping to ensure privacy by design and as default across all areas of our business.

Your Experience

Must have:

• Qualified solicitor in the UK with strong experience (usually +5 years’ PQE) in a privacy and data protection focussed Counsel position
• Proven track of work in a tech company or reputable law firm
• Knowledge of data protection laws globally (including the US)
• Practical experience in privacy by design
• Knowledge of risk management
• Knowledge of OneTrust, JIRA, Confluence

Nice to have:

• CIPP certifications (CIPP/E, CIPM, CIPT, CIPP/US of others)
• Knowledge of agile methodologies
• Proven track of work in a health tech, digital health or digital wellness company

What you’ll be doing

You’ll be responsible for:

• Develop and maintain global privacy policies and procedures
• Provide privacy and data protection advice to the business (special focus on worldwide data driven initiatives)
• Give guidance to ensure data protection is baked into the design, build, test and deployment stages across activities and departments
• Support the VP of Privacy in carrying out Data Protection Impact Assessments, and providing solutions to mitigate privacy risks
• With support of the team, undertake data protection audits and reviews
• Assist with the creation and delivery of staff training in privacy best practice to all entities and affiliates (with a particular focus on digital data uses)
• Undertake legal research on emerging privacy and data protection laws and guidance
• Work to ensure that data protection and best practices are fully integrated into the compliance framework of the business
• Support our technology and information security teams on cyber security, data privacy and data ownership
• Manage relationships with not only colleagues internal to Flo, but also vendors, contractors and external stakeholders

Your targets will be:

• Making sure the company has enough privacy resource and assistance
• Providing business-oriented and compliant privacy solutions to the company