{"id":491885,"url":"https://alion.io/job/abby-care-senior-privacy-and-ai-counsel","title":"Associate General Counsel, Privacy, Product & AI","company":{"id":6409,"name":"Abby Care","domain":"abbycare.org","url":"https://alion.io/company/abbycare","size_band":null,"is_staffing_agency":false,"is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":250000,"max":275000,"currency":"USD","period":"year","gross":null,"usd_annual":275000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"HIPAA","optional":false},{"name":"SOC 2","optional":false},{"name":"NIST AI RMF","optional":true}],"status":"live","first_seen_at":"2026-06-24T17:59:23Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-09-24T17:55:17Z","board_verified":true,"closed_at":null,"days_open":92,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":91},"description":"About Abby Care: Powering the future of care at home for all of America.\nAbby Care is building the leading AI-native platform for family-led care. America is facing a growing care crisis. Millions more people need care at home than ever. Over 50 million family caregivers support loved ones without the tools, training, or recognition they deserve.\nWe believe families are the largest untapped caregiving workforce in America, and that technology can help them deliver better care while driving stronger outcomes and greater transparency across the healthcare system.\nAbby Care combines clinical oversight with an AI-powered platform to train, enable, and support family caregivers in delivering high-quality care at home. Our platform helps health plans and government partners better understand, verify, and improve care in the home. We expand access to care, reduce reliance on higher-cost settings, and help ensure public dollars are spent effectively.\nWe are proud to partner with leading health plans, providers, and community organizations and are backed by top VCs. We envision a future where family-led care is a core part of the healthcare system. Abby Care is building that future.\nJoin us in solving one of the most important challenges of our time.\nThe Opportunity:\nAs we expand our capacity to support more family caregivers at scale, we’re growing the teams that support this work. We're looking for a high-agency operator to join us as our Associate General Counsel, Privacy, Product & AI. Reporting to the General Counsel, you'll be the day-to-day owner of Abby Care’s privacy and AI governance programs in a high-tempo, rapidly evolving environment where the regulatory landscape shifts fast and ambiguity is the norm, not the exception.\nSitting at the intersection of strategy and execution, this is a senior, build-and-lead role. While our privacy program has a working foundation, our next phase-broader AI deployment, new state environments, and a denser vendor ecosystem-requires a senior lawyer who can set program strategy, run day-to-day operations, and serve as a true subject matter expert. You won't just be reviewing individual cases; you will own the AI governance program, scale our HIPAA Privacy program, and partner closely with the GC, Product, Engineering, Operations, and Clinical leadership to unlock safe, compliant growth. Alongside the GC, you will also brief the Executive team and Board on privacy and AI risk.\nA true player-coach, you are equally comfortable setting high-level program strategy as you are rolling up your sleeves to handle daily reviews. Highly collaborative, you find energy working across diverse, cross-functional teams toward a common goal. If you are excited by the opportunity to build the playbook for AI and privacy at scale, all while transforming care at home for vulnerable populations, we’d love to hear from you!\nThis is a Full-Time Hybrid opportunity based in San Francisco or remote.\nWhat you’ll work on:\nOwn Abby Care's privacy program for both patient data and payor data - HIPAA compliance, state privacy and consumer health data law compliance, BAA program, data mapping and ROPA, privacy incident response, breach assessment and notification, and individual rights workflows, including its design, operation, measurement, and continuous improvement.\n\nOwn Abby Care's AI governance program, the responsible AI policy suite, AI inventory, AI use case intake and review process, model risk classification, ongoing monitoring, and AI incident response, and evolve it as the regulatory and deployment landscape shifts.\n\nOwn the AI use case review framework, risk tiering, and SLAs for internal generative and agentic AI tools and for AI-powered features in Abby Care's product, including chart update, documentation extraction, and clinical decision support. Exercise final legal sign-off and escalate enterprise-level risk decisions to the General Counsel.\n\nSet regulatory change management strategy across federal and state privacy, health data, and AI law. Translate horizon scanning into program and product decisions, not just memos.\n\nOwn the BAA program end-to-end, including standard templates, fallback positions, vendor risk integration, and downstream subcontractor flow-downs.\n\nLead privacy and data-use terms in payor relationships, including data use agreements, MCO and state Medicaid privacy and security requirements, and payor security diligence, so that Legal accelerates deals rather than gating them.\n\nServe as the senior legal partner to Product, Engineering, Operations and Clinical teams on the privacy, AI, and product-regulatory implications of new and existing features, including patient-and caregiver-facing disclosures, consumer protection, and communications rules. Review PRDs, design documents, and model cards; sit in design reviews; influence the roadmap.\n\nPartner with Security and IT on HIPAA Security Rule compliance and the security certifications and attestations payors require (e.g., SOC 2, HITRUST).\n\nLead privacy and AI incident response, including investigation, breach analysis, regulator and individual notification, and post-incident program remediation.\n\nOwn the privacy and AI sections of the Board package and present privacy and AI risk to the Board of Directors or its designated committee.\n\nManage outside privacy and AI counsel relationships, including scope, budget, and quality of work product.\n\nHire, develop, and lead the privacy and AI team as it grows.\n\nServe as Abby Care’s HIPAA Privacy Officer, and partner with the General Counsel and Compliance leadership on training and awareness programs, and the integration of privacy and AI controls into the broader compliance program.\n\nWhat success looks like:\nIn your first six months, you have taken full operational ownership of the privacy and AI governance programs from the General Counsel. You have completed a program assessment, set the 12-month work plan, and aligned the GC and Compliance leadership on it. The AI use case review process is yours - documented, in operation, and meeting SLAs you set. The BAA program has a refreshed template, a clear playbook, and a current portfolio.\nIn your first twelve months, Abby Care's privacy program is operating against documented standards that you own, with active monitoring, a current data map, a refreshed BAA portfolio, and a tested incident response workflow. The AI governance program is operating end-to-end and has reviewed every AI use case in production and in the active product pipeline. You have built credibility as the senior legal partner to Product, Engineering, Operations and Clinical leadership; you sit in the design reviews that matter; and the AI roadmap reflects your input.\nIn year two, the privacy and AI programs are running on a predictable cadence, with measurable improvements year over year and meaningful leverage from the team growing under you. You are the company's internal authority on healthcare AI deployment, you manage the outside privacy counsel relationship directly, and you have presented to the Board of Directors and are the company's named lead for privacy and AI risk at that level.\nWhat you’ll have:\nJD from an accredited law school and active bar membership in good standing in at least one U.S. jurisdiction.\n\n8+ years of legal experience, in-house and/or at a leading law firm, including 6+ years of substantial privacy work and hands-on AI governance experience. In-house experience at a healthcare or healthcare technology company strongly preferred.\n\nDeep working command of HIPAA/HITECH - including the Privacy, Security, and Breach Notification Rules - and a demonstrated track record of building HIPAA Privacy programs.\n\nDeep working command of U.S. state privacy and consumer health data laws and the emerging U.S. state AI law landscape.\n\nA demonstrated track record at a growth-stage or similarly resource-constrained organization of building or materially rebuilding, not just operating, at least two of: (a) a HIPAA privacy program; (b) an AI governance program, including responsible AI policy design, AI use case review framework, model risk classification, and AI-related product review; and (c) end-to-end privacy incident response, including regulator-facing notification and post-incident remediation.\n\nExperience hiring, developing, and leading lawyers or privacy professionals, or a clear readiness to build and lead a team.\n\nStrong written communication and the credibility to take and defend a position with executives, the Board, regulators, and outside counsel. Experience advising senior executives and presenting to a Board of Directors.\n\nComfort operating in a fast-growth environment with imperfect data, parallel priorities, and the need to write the policy yourself before handing it off.\n\nNice to Have:\nExperience advising on healthcare AI deployment, including FDA SaMD/CDS analysis, clinical decision support governance, patient-facing AI disclosures, and HHS Section 1557 requirements for patient care decision support tools.\n\nFamiliarity with 42 CFR Part 2, the 21st Century Cures Act information blocking rules, and state Medicaid confidentiality requirements.\n\nFamiliarity with NIST AI RMF, ISO/IEC 42001, and other AI assurance frameworks.\n\nPrior work with state Medicaid agencies, MCOs, or other government payors on privacy or data use matters.\n\nIAPP certifications (CIPP/US, AIGP or CIPM).\n\nA sense of humor and a steady temperament under pressure.\n\nBenefits\nCompetitive compensation packages that reflect the value you bring. We reward our team for the impact of their work.\n\nComprehensive health coverage that works for you. Choose from high-quality medical dental and vision options, including a $0 deductible PPO and a company-funded HSA, alongside employer-paid life and disability insurance.\n\nGenerous paid time off. We provide policies that allow you to recharge along with 10 paid company holidays.\n\nFinancial savings benefits to support your future. We support your financial well-being with HSA contributions, optional FSA and commuter benefits, and full coverage of all 401(k) account fees (employer match not currently offered).\n\nPaid parental leave to support your growing family. We provide paid leave, so you can focus on bonding and adjusting to life as your family grows.\nWe are an equal opportunity employer and welcome applicants from all backgrounds, consistent with applicable laws. Employment is contingent upon successful completion of a background check, satisfactory references, and any required documentation.\n\nOur Values\nFamilies First Redefining healthcare starts with how we treat the parents and children we serve. We go above and beyond for every family, building strong, lasting relationships. We continually ask ourselves, “Would we want this for our own families?”\n\nUrgency with Precision Millions of families are waiting for care, and they cannot wait, therefore this is not your typical 9 to 5 job. We match their urgency with our own, delivering exceptional care without compromise. Here, speed and excellence go hand in hand.\n\nRelentlessly Resourceful As an ambitious startup, we adapt quickly and make the most of limited time and resources. We solve challenges with creativity to deliver results without unnecessary complexity.\n\nPurpose with Positivity We take our mission seriously while never losing sight of the people behind the work. Respect, kindness, memes, and coffee make us stronger as a team and better for the families we serve.\n\nDriven to Redefine What’s Possible We are here to make healthcare better, which means asking hard questions, challenging outdated systems, and finding smarter, more compassionate ways to deliver care.\n\nAutomated Decision Tools\nAbby Care may use automated decision tools to help match and rank candidate work experience, education and skills found in online profiles, resumes and job applications against job requirements. We believe that these tools help ensure objective, data-based de...","description_format":"text","description_chars":12212,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Health","Home Healthcare","Nursing Care"],"lifecycle":[{"event":"open","at":"2026-09-07T01:39:55Z"}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.459,"p_room":0.28,"age_days":91,"expected_fill_days":27,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-09-24T05:45:00Z"},"pay":{"stated_usd_annual":275000,"is_top_pay":true},"html_url":"https://alion.io/job/abby-care-senior-privacy-and-ai-counsel","json_url":"https://alion.io/job/abby-care-senior-privacy-and-ai-counsel.json","meta":{"generated_at":"2026-09-24T20:14:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers"}}