Counsel, Healthcare Regulatory & Privacy

About the role

Verily is looking for a Counsel, Healthcare & Privacy to serve as a broad-based legal advisor across our provider-facing healthcare business, with deep expertise in healthcare privacy. Reporting to the Deputy General Counsel - Enterprise, this role will partner closely with teams across the company to navigate the complex regulatory landscape at the intersection of healthcare delivery, technology, and data privacy — helping Verily build innovative, compliant solutions that improve health outcomes. This is a high-impact opportunity for a healthcare attorney who thrives on variety, enjoys being a hands-on business partner, and wants to bring deep privacy expertise to bear on real-world healthcare and digital health challenges.

Responsibilities

• Serve as day-to-day advisor on privacy laws and continuous improvement of privacy programs based on up-to-date knowledge of relevant data privacy and security regulations and industry guidelines across global markets, including the Health Insurance Portability and Accountability Act (“HIPAA”), the California Consumer Privacy Act (“CCPA”), and the EU General Data Protection Regulation (“GDPR”).
• Advise on all potential healthcare regulatory issues which can arise in negotiations and contracts with health systems, plans/payors, and other B2B arrangements such as provider agreements, professional services arrangements, management services organization (MSO) structures, physician relationship compliance (Stark Law, Anti-Kickback Statute, fee-splitting/corporate practice of medicine considerations), privacy, security, and financial terms.
• Advise on healthcare regulatory requirements such as scope-of-practice rules, healthcare fraud and abuse, and reimbursement/coding considerations as they intersect with Verily's products and services with particular focus on commercial and marketing practices.
• Partner with the data security team to expeditiously and thoroughly manage incidents (both data privacy and security) as well as any escalations from customers and investigations/inquiries from regulators.

Qualifications

Minimum Qualifications

• J.D. from an accredited law school and active bar membership in good standing.
• 6 or more years of relevant legal experience, in a law firm or in-house at a healthcare provider, medical device, life sciences, or a health tech company.
• Substantive experience advising on provider-side healthcare regulatory and compliance matters (contracting, practice management, fraud & abuse/regulatory compliance, and marketing practices).
• Strong working knowledge of HIPAA and hands-on experience advising on state privacy laws (e.g., CCPA/CPRA or similar state frameworks).
• Demonstrated ability to translate complex regulatory requirements into clear, practical, business-friendly guidance.
• Experience working directly with cross-functional teams (product, engineering, compliance) in a fast-paced, tech-enabled environment.

Preferred Qualifications

• Experience with digital health products, including familiarity with the FDA regulatory framework for software-as-a-medical-device (SaMD).
• Comfort level with development of AI offerings designed to be used in healthcare settings and/or actual usage of AI in healthcare settings.
• Familiarity with additional state health data privacy laws beyond CCPA/CPRA (e.g., Washington My Health My Data Act, Texas HB 300/TMPRA, etc.).

Pay

The US base salary range for this full-time position is $188,500 - $282,500 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.