Senior Director, Digital Legal Office – Health and Wellness Privacy Counsel

Employment Type: Full time

Position Overview

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.

The successful candidate will be an experienced and strategic attorney with impeccable judgment who will provide legal and regulatory guidance on privacy issues related to health and wellness data collection and processing. This role includes a particular focus on Health Insurance Portability and Accountability Act (HIPAA) compliance, digital health privacy, and related healthcare data protection laws and pharmacy operations. The individual must be motivated by working in a dynamic environment with broad responsibility, as this position will effectively partner with a wide range of collaborators across the company. You will have direct, front-line responsibility providing strategic counsel to various functions, including ethics and compliance, information technology, cybersecurity, and privacy, artificial intelligence, data governance, and will liaise with specialty legal colleagues to counsel and strategize on these issues. This attorney will also collaborate with the government affairs team in influencing legislation and industry standards related to relevant information privacy. The position reports to the Associate Vice President, Assistant General Counsel, Digital Legal Office Global Legal Lead (Privacy).

Responsibilities

• Serve as the primary legal advisor on HIPAA Privacy and Security Rules, HITECH, and related healthcare data protection laws.
• Provide legal counsel on the design and implementation of digital health technologies, Pharmacy Management Systems, EHR platforms, health plans, onsite employee health clinics and related primacy care services, mobile health applications, and other healthcare IT solutions.
• Advise on legal risks and mitigation strategies related to pharmacy intake and dispensing operations, including patient data intake, prescription processing, and digital consent.
• Draft, review, and negotiate contracts involving protected health information (PHI), including Business Associate Agreements (BAAs), data sharing agreements, and vendor contracts.
• Collaborate with IT, Compliance, and Product teams to ensure privacy-by-design principles are embedded in all digital solutions.
• Monitor and interpret evolving federal and state privacy laws (e.g., CCPA, CPRA, state-specific pharmacy laws) and advise on their impact.
• Support incident response and breach notification processes in accordance with HIPAA and state breach laws.
• Provide training and education to internal team members on HIPAA, digital privacy, and pharmacy compliance.
• Draft and review, and otherwise support negotiations regarding privacy provisions in a wide variety of agreements.
• Oversee legal response to data breaches or privacy/security incidents including investigations, notifications, and remediation.
• Support audits, regulatory inquiries, and enforcement actions.

Basic Qualifications

• J.D. degree from accredited schools.
• Active license to practice law in the United States.
• Minimum of 7 years of legal experience, with a focus on healthcare law.
• Extensive experience and in-depth knowledge of the Health Insurance Portability and Accountability Act (HIPAA) and its regulations with a consistent record of providing legal support to pharmacies, Covered Entities, and Business Associates.

Additional Skills/Preferences

• Demonstrated experience standing up, supporting, and maintaining complex health and wellness privacy programs.

Company Information

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.