Privacy Attorney Jobs in Utah (NOW HIRING)

About the Role

Office Ally is seeking a commercially-minded Corporate Counsel to join our legal team. Reporting to the General Counsel, this is a high-impact, high-autonomy role touching virtually all aspects of the company's day-to-day legal work, with particular depth in commercial contracting, healthcare compliance, HIPAA and PHI governance, data commercialization, and legal technology. In this role, you’ll negotiate complex data licensing deals, advise on HIPAA breach responses, collaborate with our sales team to manage and streamline our CLM workflow, and utilize AI to make the legal function faster and smarter by improving contract workflows and cross‑functional business processes.

This role is ideal for a pragmatic, business-oriented attorney who thrives as a problem‑solving generalist with healthcare technology experience, enjoys working across multiple legal disciplines simultaneously, and wants to be deeply embedded in the business operations of a growth‑stage healthcare technology company.

Commercial Contracting & CLM

• Draft, negotiate, and manage a broad range of commercial agreements, including SaaS agreements, BAAs, revenue recovery service agreements, data licensing and data sharing agreements, vendor contracts, and payer agreements.
• Own and administer the company's CLM platform (Ironclad or similar), including workflow configuration, template management, and process improvement.
• Improve and maintain Office Ally's form contract templates, negotiation playbooks, and fallback positions to enable the sales and partnerships teams to move quickly and consistently.

HIPAA, PHI & Healthcare Compliance

• Serve as a primary legal resource on HIPAA/HITECH compliance, including the Privacy, Security, and Breach Notification Rules, with particular focus on Office Ally's unique role as a healthcare clearinghouse and business associate.
• Advise on PHI handling, use, disclosure, and de‑identification across Office Ally's products and data operations.
• Support the company's HIPAA compliance program, including policy development, workforce training, risk assessments, and breach response.
• Advise on state healthcare privacy laws, including sensitive health data categories and monitor HHS, OCR, and CMS regulatory developments.

Product Development and Commercialization

• Counsel the business on the compliant commercialization of healthcare data, including the structuring, licensing, and sale of data products and data‑as‑a‑service offerings, ensuring that each transaction is grounded in a defensible regulatory framework and aligned with Office Ally's obligations to its customers and their patients.
• Advise on the full spectrum of data use scenarios—PHI under HIPAA authorizations and BAAs, as well as de‑identified data.
• Partner with product, data science, and business development teams to assess new data monetization opportunities and structure them compliantly from the ground up.

Broader Compliance & Legal Support

• Support compliance risk assessments, internal investigations, and responses to government inquiries and audits.
• Manage and respond to subpoenas and other legal process requests, including coordinating with internal teams on document collection, reviewing responsive records for privilege and confidentiality, and liaising with outside counsel as needed.
• Assist the General Counsel on M&A due diligence, corporate governance, and transaction support.

Legal Technology & AI

• Champion CLM administration and legal ops process improvements across the legal function.
• Evaluate and deploy AI-powered tools for contract review, compliance research, and legal drafting — and serve as an internal advocate for responsible AI adoption.
• Advise on legal and regulatory considerations around Office Ally's own use of AI and machine learning in its products.

• Juris Doctor (J.D.) degree and active bar admission in at least one U.S. state.
• 4+ years of experience, including meaningful in‑house and/or law firm experience in healthcare technology, health IT, or SaaS.
• Substantive HIPAA expertise, including hands‑on experience with PHI governance and negotiation of BAAs.
• Experience advising on healthcare data commercialization or data licensing arrangements.
• Experience drafting and negotiating SaaS, data sharing, and related commercial technology agreements.
• Experience with a CLM platform; Ironclad strongly preferred.
• Demonstrated interest in or active use of AI tools for legal applications, and genuine enthusiasm for building a modern, tech‑enabled legal function.
• Clear and effective communicator with the ability to translate complex legal issues into practical guidance for non‑lawyers.
• Highly organized, self‑directed, and comfortable managing a high volume of varied matters.
• Problem‑solving skills and a business‑practical mindset are paramount.

• In‑house experience at a health IT company, clearinghouse, or RCM organization.
• Experience with data‑centric business models.
• Familiarity with emerging federal and state healthcare and health data legislation.
• Experience with AI tools and working within sales‑centric CLM.
• Prior experience in a PE‑backed company environment.

• This role requires limited travel (up to 5× per year), which may include client meetings, team gatherings, or company events.
• Travel will typically be scheduled in advance and supported by the company.

• Office Ally supports both remote and hybrid work arrangements.
• Candidates residing near our offices in Brentwood, TN; Vancouver, WA; Lehi, UT; or San Antonio, TX will be expected to work onsite on a hybrid schedule.

At Office Ally, your work has a direct impact on healthcare providers and their ability to deliver exceptional care. We’re driven by a mission to simplify healthcare administration, making it easier for providers to focus on what they do best—helping patients. As an Office Ally employee, you’ll be at the heart of our efforts to deliver exceptional service and software solutions to our clients in the healthcare space.

Office Ally is an Equal Opportunity Employer and does not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classification protected by federal, state, or local law.