Full-Time

Data Protection Programs Director

Posted on 6/27/2024

Everly Health

Everly Health

201-500 employees

At-home health testing kits and services

Healthcare

Senior, Expert

Remote in USA

Category
Risk & Compliance
Legal & Compliance
Required Skills
Marketing
Data Analysis
Requirements
  • Bachelor’s degree from an accredited college or university.
  • Minimum of 15 years of professional experience in data protection/privacy, including at least 5 years of experience partnering with technology and marketing executives to manage data derived from digital tracking and marketing technologies to comply with applicable regulatory and digital advertising industry requirements.
  • Subject matter expertise with the federal and state data privacy laws, regulations, and industry codes in the U.S., and ability to translate written regulatory requirements into actionable technological specifications and Privacy Impact Assessments.
  • Professional experience conducting privacy by design reviews, particularly in the healthcare, healthtech and medical device verticals.
  • Law degree from an ABA-accredited law school preferred.
  • CIPP/CIPM/CIPT certification strongly preferred.
Responsibilities
  • Builds a strategic and comprehensive data protection program that defines, develops, maintains and implements policies and processes that enable consistent, effective data protection practices which minimize risk and ensure the confidentiality of personally identifiable information (PII) and protected health information (PHI), paper and/or electronic, across all media types.
  • Ensure the organization has and maintains appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements.
  • Establishes, with the information security officer, an ongoing process to track, investigate and report potential unauthorized access and disclosure of protected information (PII/PHI). Monitor patterns of access and/or disclosure of protected health information.
  • With oversight from the Chief Privacy Officer, recommends and manages all required breach determination and notification processes.
  • Complete research and apply a risk-based assessment of how legal requirements affect new services, offerings, projects, products, or initiatives.
  • Lead privacy by design reviews of client-facing services, offerings, projects, products or initiatives, incorporating data privacy principles into those initiatives.
  • Build and maintain strong and trusted relationships with internal and external stakeholders and provide support and advice in support of rapid-solutioning to meet current and future business needs.
  • Performs initial and periodic risk assessment/analysis, mitigation and remediation.
  • Collaborates with the information security officer to ensure alignment between security and privacy compliance programs including policies, practices and investigations.
  • Support contract negotiations on an as-needed basis to review data privacy contractual provisions with customers and third-party suppliers, such as data processing agreements, data transfer agreements, and business associate agreements.
  • Keep abreast of technological developments, changes in the law, and enforcement trends, and their impact on data privacy. Develop guidance, training, and thought leadership as needed for internal audiences.
  • Conducts related ongoing compliance monitoring activities in coordination with the organization's other compliance and operational risk assessment functions.
  • Oversees, develops and delivers initial and ongoing privacy training to the workforce, Initiates, facilitates and promotes activities to foster information privacy awareness within the organization and related entities.
  • Works cooperatively with business teams in overseeing patient rights to inspect, amend, and restrict access to protected health information when appropriate.
  • Establishes and administers a process for investigating and acting on privacy and security complaints.

Everlywell provides at-home health testing kits that enable consumers to collect samples like blood, urine, and saliva without leaving their homes. The company offers over 30 different tests that assess various health aspects, including food sensitivity, fertility, hormone levels, and COVID-19. Customers can purchase these kits directly from the Everlywell website, and the company handles the lab analysis and delivers physician-reviewed results. Unlike many competitors, Everlywell also caters to enterprise clients by supplying rapid COVID-19 antigen tests for workplaces, schools, and clinics. The goal of Everlywell is to make health monitoring accessible and convenient while ensuring compliance with FDA guidelines and delivering reliable results quickly.

Company Stage

Private

Total Funding

$248.5M

Headquarters

Austin, Texas

Founded

2015

Growth & Insights
Headcount

6 month growth

-8%

1 year growth

0%

2 year growth

-2%
Simplify Jobs

Simplify's Take

What believers are saying

  • Spotwell™ technology reduces errors, increasing customer satisfaction and trust.
  • Partnership with National Kidney Foundation strengthens Everly Health's position in kidney diagnostics.
  • Collaboration with Network Health expands reach into chronic disease management.

What critics are saying

  • Increased competition from companies like Turtle Health may impact market share.
  • Spotwell™ technology could face privacy concerns from users.
  • Partnerships may face challenges if partners choose other diagnostic companies.

What makes Everly Health unique

  • Everly Health offers over 30 at-home health tests, covering diverse health aspects.
  • Spotwell™ technology ensures blood sample sufficiency, enhancing user experience and accuracy.
  • Partnerships with health organizations expand Everly Health's reach in specialized diagnostics.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Mental Health Support

401(k) Retirement Plan

401(k) Company Match

Unlimited Paid Time Off

Wellness Program

INACTIVE