Director, Privacy Counsel

Omada Health is on a mission to bend the curve of chronic disease. Job overview: Omada Health is seeking a Director, Privacy Counsel to manage and mature our enterprise-wide privacy program across a complex and rapidly evolving regulatory landscape. This individual contributor role will operate at the intersection of healthcare regulatory law, consumer technology, and clinical operations, providing practical, business-oriented guidance that enables innovation while protecting our members’ data and trust. Reporting to the VP, Privacy and Healthcare Regulatory, you will serve as Omada’s primary operational privacy leader, partnering across Product, Engineering, Clinical, Commercial, and other key functions to design, implement, and continuously improve policies, processes, and controls that keep us compliant and ahead of emerging risks. Your impact: Manage Omada’s HIPAA privacy program, including policy and procedure development, incident investigations, and breach determination and response, ensuring compliance with HIPAA Privacy, Security, and Breach Notification Rules. Drive privacy-by-design across digital products and services by embedding privacy requirements into product development, engineering workflows, clinical operations, and other business processes. Execute Omada’s privacy risk assessment program, including data governance, vendor due diligence, and privacy review for commercial deals with employers, health plans, and PBMs, ensuring our contractual and regulatory obligations are met. Provide expert guidance on consumer privacy compliance, including state consumer health data and general consumer privacy laws, digital advertising, and tracking technologies. Serve as a key advisor on AI and emerging technologies, including AI privacy guidance and governance considerations across Omada’s AI and machine-learning initiatives. Support interoperability and health information exchange participation (e.g., Carequality, CommonWell, TEFCA) by counseling on privacy and data use requirements and helping design compliant data flows. Partner with internal stakeholders on ERISA and self-funded health benefit plan privacy considerations. Support clinical research pri vacy compliance and IRB-adjacent work. Design and deliver privacy training, awareness, and culture-building initiatives that enable Omada teammates to understand and live our privacy obligations in their day-to-day roles.