Sr. Counsel Data Privacy and Enablement

Sr. Counsel Data Privacy and Enablement

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

Location: Atlanta, GA; Columbus, OH or Dallas, TX (Preferred) Hybrid

The Role

McKesson's well-regarded Data and Digital Assets (D&DA) legal team is seeking an experienced, pragmatic attorney specializing in data enablement and privacy to join a legal team providing decisive day-to-day legal counseling and advice to the Prescription Technology Solutions portfolio of healthcare and technology-oriented business units as well as enterprise level functions such as McKesson Technology.

The Senior Counsel, Data Privacy and Enablement, will be pivotal in McKesson's risk mitigation and data enablement strategies in the Prescription Technology Solutions segment and across the McKesson enterprise. Reporting to the Managing Chief Counsel, Data Privacy and Enablement, this role will focus on both segment specific and enterprise-level data initiatives while solutioning for nuanced data use cases and prevailing privacy requirements.

This position requires a dynamic attorney who will proactively collaborate with business unit attorneys, business unit compliance professionals as well as business leaders across the enterprise to drive innovation while adeptly managing risk within the highly regulated healthcare industry.

Key Responsibilities

The successful candidate will:

• Innovate and Drive Change. Leverage knowledge and experience in data strategy and enablement, privacy (including experience with HIPAA/healthcare privacy issues), and various privacy adjacent laws and regulations to deliver actionable, risk-based guidance to the enterprise.
• Provide Strategic Counseling. Possess excellent legal judgement and communication skills with the ability to deliver timely, high-quality guidance that is both pragmatic and strategic.
• Collaborate and Influence. Excel when working collaboratively across a broad array of businesses with a track record of taking lead on complex issues and influencing others to drive organizational change.
• Navigate Complexity. Skillfully navigate a highly matrixed organization, building relationships across the enterprise and influencing key stakeholders and other partners.
• Lead and Execute. Demonstrates capability to implement data initiatives at both the enterprise and segment levels by effectively addressing complex and emerging legal challenges, providing key leadership within project teams, and ensuring accountability throughout all phases of execution.
• Integrate and Align Data Strategies. Integrate and harmonize business unit data priorities with the enterprise data strategy to provide solution-oriented and data-enabling guidance.
• Manage Multiple Priorities. Be highly proactive, accountable, team-oriented, and capable of managing multiple competing priorities in a fast-paced, dynamic environment.
• Monitor and Adapt to Evolving Laws. Stay abreast of developing laws, regulations, and industry best practices to guide the segment and applicable enterprise functions through an evolving regulatory environment.

Qualifications

Minimum Requirements

• Degree of equivalent and typically requires 4+ years of relevant experience
• 3+ years of specialized experience in data strategy and enablement, privacy, and/or technology law
• Member of a U.S. state bar in good standing

Critical Skills

• Experience advising both business and legal leaders on complex legal, regulatory, and policy questions in the areas of data strategy and enablement, privacy, emerging regulations, and data governance.
• In-depth expertise on HIPAA and other healthcare privacy laws with an emphasis on data rights, data enablement and data strategy. Detailed knowledge of a broad range of additional privacy and data protection laws including, the FTC Act, TCPA, biometrics laws, evolving state regulations on a variety of privacy adjacent topics, state consumer protection laws, state breach notification laws, and laws impacting employee data.
• Experience conducting privacy focused legal reviews of new or existing technology, services, and product offerings with the ability to quickly learn (often self-teaching) technical concepts.
• Demonstrated knowledge of trends and issues applicable to privacy and emerging technology arenas. This includes knowledge of such concepts as data strategy, data optimization, data enablement, data localization, data rights contracting, tokenization, and anonymization/de-identification.
• Supporting the development and implementation of privacy-related business-specific processes and procedures, training, and other controls.
• Supporting the development of strategic data governance frameworks and their associated rollouts across the enterprise and the Prescription Technology Solutions segment.
• Experience handling incident response and managing regulatory investigations arising from privacy or cyber incidents.
• Ability to monitor and evaluate evolving laws, regulations, and industry best practices to help the Prescription Technology Solutions segment and the enterprise navigate new requirements against both existing and anticipated business models. This includes the ability to guide the business toward opportunities, including reviewing, advising, and supporting data rights strategies.
• Capable of handling complex legal issues, disputes, or transactions with minimal guidance. Experience managing outside counsel, as necessary.

Additional Knowledge and Skills

• Experience counseling corporations in the healthcare industry on data initiatives.
• Proven track record of successfully navigating emerging areas of privacy law and building effective data enabling frameworks.
• Ability to provide strategic legal advice from a data strategy and enablement perspective in complex business transactions. This includes performing legal due diligence, recommending appropriate post-integration actions, and drafting and negotiating relevant language in M&A-related contracts and documents.
• Ability to effectively and efficiently collaborate with internal stakeholders to support due diligence, analysis, preparation, drafting, and/or negotiation of pertinent third-party business arrangements, intercompany agreements, and ad hoc contractual provisions related to privacy laws.
• CIPP/US, and/or similar professional certification(s).

Education

• Juris Doctor degree with excellent academic credentials

Physical Requirements

• General office demands.
• Must have the ability to travel up to 15% of the time.

Must be authorized to work in the US. Sponsorship is not available for this position.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

Our Base Pay Range for this position $134,500 - $224,100

McKesson is an Equal Opportunity Employer. McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information.