Legal Counsel

Role Overview

Legal Counsel role on SimplePractice’s Legal team, partnering with product, engineering, marketing, and business teams. You will advise across product development, privacy, regulatory compliance, and commercial contracting, with emphasis on responsible AI in mental healthcare and digital health privacy.

Key Responsibilities

Product and Regulatory Counsel

• Advise product and engineering teams on new features, product launches, and platform changes
• Perform regulatory impact assessments for new product initiatives (especially responsible AI in healthcare)
• Monitor and analyze emerging SaaS, AI, and digital health regulations affecting the platform and mental health tech
• Review marketing and website/promotional materials for compliance with healthcare advertising regulations and FTC guidelines

Privacy

• Conduct impact assessments for new and existing features, primarily for HIPAA (Privacy Rule, Security Rule, and Breach Notification Rule)
• Advise on data collection, use, storage, and sharing across the platform (including EHR and client portal)
• Support incident response and breach notification obligations
• Stay current on federal/state privacy developments (including CCPA/CPRA and state health data laws) and translate changes into actionable guidance
• Collaborate with Compliance, Security, Data, and Engineering on data protection practices and compliance documentation

Contracting and Partnerships

• Draft, review, and negotiate commercial agreements, including:
  • Customer contracts
  • SaaS subscription agreements
  • BAAs
  • Vendor contracts
  • Partnership agreements
  • Data processing agreements
• Evaluate business partners and vendors through legal review
• Manage contract lifecycle and maintain accessible records

Policy and Terms Development

• Draft and maintain privacy policies, Terms of Service, acceptable use policies, and related user-facing legal documents
• Create internal privacy/data handling/AI governance/regulatory compliance playbooks and training materials
• Build scalable legal processes and templates to support fast-moving business needs without compromising compliance

Required Qualifications

• J.D. from an accredited law school and active U.S. state bar membership (California preferred)
• 7–8+ years of legal experience with meaningful exposure to:
  • Healthcare privacy (HIPAA)
  • Technology transactions
  • SaaS/digital health

Nice to Have

• Specific familiarity with AI governance in healthcare and evolving digital health privacy regimes (implied by the role focus)