Simplify Logo

Full-Time

Data Protection Programs Director

Confirmed live in the last 24 hours

Everly Health

Everly Health

501-1,000 employees

At-home health testing kits and services

Healthcare
Consumer Goods
Government & Public Sector

Senior, Expert

Remote in USA

Category
Risk & Compliance
Legal & Compliance
Required Skills
Marketing
Data Analysis
Requirements
  • Bachelor’s degree from an accredited college or university.
  • Minimum of 15 years of professional experience in data protection/privacy, including at least 5 years of experience partnering with technology and marketing executives to manage data derived from digital tracking and marketing technologies to comply with applicable regulatory and digital advertising industry requirements.
  • Subject matter expertise with the federal and state data privacy laws, regulations, and industry codes in the U.S., and ability to translate written regulatory requirements into actionable technological specifications and Privacy Impact Assessments.
  • Professional experience conducting privacy by design reviews, particularly in the healthcare, healthtech and medical device verticals.
  • Law degree from an ABA-accredited law school preferred.
  • CIPP/CIPM/CIPT certification strongly preferred.
Responsibilities
  • Builds a strategic and comprehensive data protection program that defines, develops, maintains and implements policies and processes that enable consistent, effective data protection practices which minimize risk and ensure the confidentiality of personally identifiable information (PII) and protected health information (PHI), paper and/or electronic, across all media types.
  • Ensure the organization has and maintains appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements.
  • Establishes, with the information security officer, an ongoing process to track, investigate and report potential unauthorized access and disclosure of protected information (PII/PHI). Monitor patterns of access and/or disclosure of protected health information.
  • With oversight from the Chief Privacy Officer, recommends and manages all required breach determination and notification processes.
  • Complete research and apply a risk-based assessment of how legal requirements affect new services, offerings, projects, products, or initiatives.
  • Lead privacy by design reviews of client-facing services, offerings, projects, products or initiatives, incorporating data privacy principles into those initiatives.
  • Build and maintain strong and trusted relationships with internal and external stakeholders and provide support and advice in support of rapid-solutioning to meet current and future business needs.
  • Performs initial and periodic risk assessment/analysis, mitigation and remediation.
  • Collaborates with the information security officer to ensure alignment between security and privacy compliance programs including policies, practices and investigations.
  • Support contract negotiations on an as-needed basis to review data privacy contractual provisions with customers and third-party suppliers, such as data processing agreements, data transfer agreements, and business associate agreements.
  • Keep abreast of technological developments, changes in the law, and enforcement trends, and their impact on data privacy. Develop guidance, training, and thought leadership as needed for internal audiences.
  • Conducts related ongoing compliance monitoring activities in coordination with the organization's other compliance and operational risk assessment functions.
  • Oversees, develops and delivers initial and ongoing privacy training to the workforce, Initiates, facilitates and promotes activities to foster information privacy awareness within the organization and related entities.
  • Works cooperatively with business teams in overseeing patient rights to inspect, amend, and restrict access to protected health information when appropriate.
  • Establishes and administers a process for investigating and acting on privacy and security complaints.

Everlywell provides at-home health testing kits that enable consumers to collect samples like blood, urine, and saliva from their homes. The tests cover various health aspects, including food sensitivity, fertility, hormone levels, and COVID-19. Customers can order these kits directly from the company's website, and after collecting their samples, they send them to a lab for analysis. Results are then reviewed by physicians and provided to the customers. Everlywell also caters to enterprise clients by offering rapid COVID-19 antigen tests for workplaces and other organizations. The company stands out from competitors by ensuring compliance with FDA guidelines, focusing on user-friendliness, quick result turnaround, and reliable outcomes. The goal of Everlywell is to empower individuals to take charge of their health through accessible and convenient testing options.

Company Stage

Series F

Total Funding

$375.5M

Headquarters

Austin, Texas

Founded

2015

Growth & Insights
Headcount

6 month growth

-1%

1 year growth

-7%

2 year growth

-24%
Simplify Jobs

Simplify's Take

What believers are saying

  • Everly Health's innovative Spotwell™ technology and new mobile app can significantly improve user engagement and satisfaction.
  • The company's expansion into enterprise solutions, such as rapid COVID-19 tests for workplaces and schools, opens up new revenue streams and market opportunities.
  • Strategic acquisitions like Natalist enhance Everly Health's product offerings and market presence, particularly in women's health.

What critics are saying

  • The competitive landscape of at-home health testing is growing, with new entrants and established players potentially eroding Everly Health's market share.
  • Reliance on FDA compliance and regulatory approvals can pose risks if any changes in regulations occur.

What makes Everly Health unique

  • Everly Health's direct-to-consumer model and extensive range of over 30 at-home health tests set it apart from competitors who may focus on fewer or more specialized tests.
  • The integration of proprietary technology like Spotwell™ for real-time blood sample validation enhances user experience and reliability, distinguishing Everly Health from other at-home testing providers.
  • Partnerships with organizations like the National Kidney Foundation and Network Health expand Everly Health's reach and credibility in the healthcare sector.