Senior Legal Counsel, US Privacy & Data Protection

Additional Location(s): US-MA-Marlborough

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.       

About the role:

Boston Scientific is looking for a United States-based Privacy Counsel to join the legal department as a key contributor to its growing world-class Global Privacy Team. This role provides you with the opportunity to deliver legal advice and counsel to an innovative medical device leader on a broad portfolio of diverse privacy and data protection matters. Your day will include a variety of matters that will require you to assist, advise, investigate, research, and resolve legal matters as well as write corporate legal policies to ensure that company personnel are aware of and in compliance with applicable privacy and security laws and regulations.

At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week.Boston Scientific will not offer sponsorship or take over sponsorship of an employment visa for this position at this time. Relocation assistance is not available for this position at this time.

Your responsibilities will include:

• Advising business teams on the applicability and impact of various regional, federal, and state privacy frameworks, laws, and regulations that may have differential impact based on whether they operate as a medical device provider, healthcare provider, controller, processor, covered entity, business associate, or hybrid entity

• Managing outside counsel to support global business goals and ensure compliance with applicable privacy and security laws and regulations

• Fostering company compliance with global privacy and data protection laws and regulations as well as privacy and information security best practices and standards

• Providing legal counsel and support in business development activities, including conducting due diligence, advising on privacy and data protection issues, facilitating transfer of legal responsibilities, assisting and advising on product development related issues as they arise, and directing outside counsel in assisting the company with issues as needed

• Identifying, implementing, maintaining, and updating privacy policies, procedures, training, and educational materials in coordination with colleagues and cross-functional departments and business units, particularly Global IT and Cybersecurity, Legal and Compliance, Global Security, Global Quality, business units, and Human Resources

• Interacting with program and product management across Boston Scientific to provide direction and guidance on company-wide privacy and information security projects

• Assisting with the processes for receiving, managing, and appropriately responding to potential and actual security/privacy breach incidents, complaints related to privacy and security issues, and government authorities’ inquiries into the company’s privacy policies and procedures

• Coordinating privacy impact assessments, audits, and implementation of recommendations resulting from same

• Reviewing privacy and information security implications of proposed business changes, including mergers and acquisitions, marketing, and outsourcing activities

• Reviewing and advising business on data protection requirements in contracts in a variety of areas, including IT cloud service, application development, distributor data handling, consulting, non-disclosure, research, data use, clinical, business acquisitions and mergers, and other areas as needed to ensure business interests are protected

• Structuring, negotiating, and drafting privacy, data protection, and business associate agreements and assisting business and commercial counsel in reviewing data protection sections of software license agreements, master services agreements, professional services agreements, SOWs, and other types of commercial agreements

• Assisting in implementing and maintaining data mapping and third-party/vendor data management and compliance

• Remaining current on privacy and data protection developments, new legislation/regulations, and competitive benchmarking applicable to global medical device and healthcare organizations

Required qualifications:

• J.D. from an accredited university with admission to practice law in at least one state

• Understanding of HIPAA, state consumer privacy laws, My Health My Data laws, and other applicable U.S. privacy and data protection laws and regulations, and of GDPR

• Advanced proficiency in the independent review of complex privacy agreements and strong contract drafting and negotiation skills

• Minimum of 5 years of related legal work experience advising on global privacy and data protection frameworks applicable to medical device and healthcare clients, ideally as in-house counsel

Preferred qualifications:

• Certification in one or more of the following:

  • International Association of Privacy Professionals certification

  • Certified in Healthcare Privacy Compliance (CHPC) by the Health Care Compliance Association

• Knowledge of industry standards affecting privacy and information security, such as NIST and ISO 27001/27002; privacy and/or security professional certifications (e.g., CIPP)

• Experience advising medical device, pharmaceutical industry, and/or health care provider clients

• Previous experience providing strategic guidance on global privacy and data protection laws and supporting global projects by advising on privacy requirements, risk mitigation strategies, and data governance best practices

• Understanding of LGPD, PIPEDA, PIPL, PIPA, and similar global statutory frameworks

• Familiarity with the legal and compliance implications of IT service management, customer relationship management, and cloud-based systems, including experience with negotiation of related data protection agreements

• Understanding of responsible AI and data governance principles, with the ability to provide legal guidance on fairness, accountability, transparency, and ethical deployment of AI technologies within healthcare and medical device contexts

• Strong communication, presentation, interpersonal, and project management skills

• Ability to work independently and drive results

• Proactive attitude and approach towards continuous improvement

• Dedicated commitment to the highest standards of quality, integrity, ethics, and profession

Requisition ID: 613154

Minimum Salary: $133700 

Maximum Salary: $254000 

The anticipated compensation listed above and the value of core and optional employee benefits offered by Boston Scientific (BSC) – see www.bscbenefitsconnect.com--will vary based on actual location of the position and other pertinent factors considered in determining actual compensation for the role. Compensation will be commensurate with demonstrable level of experience and training, pertinent education including licensure and certifications, among other relevant business or organizational needs. At BSC, it is not typical for an individual to be hired near the bottom or top of the anticipated salary range listed above.

Compensation for non-exempt (hourly), non-sales roles may also include variable compensation from time to time (e.g., any overtime and shift differential) and annual bonus target (subject to plan eligibility and other requirements).

Compensation for exempt, non-sales roles may also include variable compensation, i.e., annual bonus target and long-term incentives (subject to plan eligibility and other requirements).

For MA positions: It is unlawful to require or administer a lie detector test for employment. Violators are subject to criminal penalties and civil liability.

As a leader in medical science for more than 40 years, we are committed to solving the challenges that matter most – united by a deep caring for human life. Our mission to advance science for life is about transforming lives through innovative medical solutions that improve patient lives, create value for our customers, and support our employees and the communities in which we operate. Now more than ever, we have a responsibility to apply those values to everything we do – as a global business and as a global corporate citizen.

So, choosing a career with Boston Scientific (NYSE: BSX) isn’t just business, it’s personal. And if you’re a natural problem-solver with the imagination, determination, and spirit to make a meaningful difference to people worldwide, we encourage you to apply and look forward to connecting with you!

At Boston Scientific, we recognize that nurturing a diverse and inclusive workplace helps us be more innovative and it is important in our work of advancing science for life and improving patient health. That is why we stand for inclusion, equality, and opportunity for all. By embracing the richness of our unique backgrounds and perspectives, we create a better, more rewarding place for our employees to work and reflect the patients, customers, and communities we serve. 

Boston Scientific Corporation has been and will continue to be an equal opportunity employer. To ensure full implementation of its equal employment policy, the Company will continue to take steps to assure that recruitment, hiring, assignment, promotion, compensation, and all other personnel decisions are made and administered without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identify, gender expression, veteran status, age, mental or physical disability, genetic information or any other protected class.

Please be advised that certain US based positions, including without limitation field sales and service positions that call on hospitals and/or health care centers, require acceptable proof of COVID-19 vaccination status.  Candidates will be notified during the interview and selection process if the role(s) for which they have applied require proof of vaccination as a condition of employment.  Boston Scientific continues to evaluate its policies and protocols regarding the COVID-19 vaccine and will comply with all applicable state and federal law and healthcare credentialing requirements.   As employees of the Company, you will be expected to meet the ongoing requirements for your roles, including any new requirements, should the Company’s policies or protocols change with regard to COVID-19 vaccination.