ABOUT THIS POSITION

Waystar is seeking a Product & Privacy Counsel to join its Legal and Privacy team and provide practical, business-oriented legal guidance across privacy, product development, technology, and data use matters. This role will partner closely with Product, Engineering, Information Security, Compliance, AI/Data Science, Sales, Customer Success, and other business teams to support the development and delivery of Waystar's products and services while managing legal and regulatory risk.

The Product & Privacy Counsel will advise on healthcare privacy requirements, emerging U.S. privacy laws, product development, artificial intelligence and data initiatives, commercial agreements, and responsible data use. This individual will play an important role in embedding privacy-by-design principles into Waystar's products and operations and translating complex legal requirements into practical guidance for business and technology teams.

WHAT YOU'LL DO

Product & Technology Counseling 

• Serve as a day-to-day legal and privacy advisor to Product, Engineering, Technology, AI/Data Science, and related business teams. 

• Counsel teams throughout the product development lifecycle regarding privacy, data protection, healthcare regulatory, and technology-related considerations. 

• Review new products, functionality, integrations, data initiatives, and technology use cases to identify and address legal and privacy risks. 

• Support privacy-by-design and privacy-by-default practices across product development. 

• Conduct and support privacy impact assessments and other product or data protection reviews. 

• Provide practical recommendations that balance legal and regulatory requirements with product and business objectives. 

Privacy & Healthcare Regulatory Counseling 

• Advise on compliance with HIPAA, HITECH, state healthcare privacy laws, state consumer privacy laws, and other applicable U.S. privacy and data protection requirements. 

• Monitor developments in privacy, healthcare data, technology, and artificial intelligence regulation and help assess their impact on Waystar's products and operations. 

• Translate legal and regulatory requirements into clear, actionable guidance for business stakeholders. 

• Support the development and implementation of privacy policies, standards, procedures, and compliance initiatives. 

• Assist with privacy-related investigations, regulatory inquiries, audits, and remediation activities. 

Data Use & Artificial Intelligence 

• Counsel business and technology teams on the collection, use, disclosure, retention, and protection of data. 

• Advise on de-identification, aggregation, analytics, benchmarking, research, and other secondary uses of healthcare and business data. 

• Partner with Product, AI/Data Science, Security, and Compliance teams to evaluate emerging AI and machine learning use cases. 

• Assess contractual, regulatory, privacy, and customer requirements affecting how Waystar may use data. 

• Support responsible data governance and AI practices across the organization. 

Commercial & Contract Support 

• Draft, review, and negotiate privacy and data protection provisions in customer, vendor, and technology agreements. 

• Review and negotiate Business Associate Agreements (BAAs), Data Processing Agreements (DPAs), and other data-related contractual terms. 

• Partner with Commercial Legal, Sales, Customer Success, and business stakeholders to resolve privacy and data protection issues arising during customer negotiations. 

• Respond to customer privacy inquiries and support privacy-related due diligence. 

• Escalate novel or significant privacy, regulatory, or contractual risks to Privacy leadership when appropriate. 

Privacy Incidents & Compliance 

• Partner with Information Security, Compliance, and Legal teams to evaluate potential privacy and security incidents. 

• Assist with legal assessments related to potential data breaches, including notification and regulatory obligations. 

• Support investigations, documentation, remediation, and other response activities. 

• Assist with regulatory, customer, and contractual analyses arising from privacy events. 

• Coordinate with outside counsel and other external advisors as needed. 

Cross-Functional Partnership 

• Build strong working relationships across Legal, Privacy, Compliance, Information Security, Product, Engineering, Sales, Customer Success, and Operations. 

• Develop and deliver privacy and data protection guidance, training, and educational resources. 

• Help identify opportunities to improve privacy processes and make legal guidance more scalable across the organization. 

• Partner with Privacy leadership on evolving privacy, product, data governance, and regulatory initiatives. 
  
   

WHAT YOU'LL NEED

Required 

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar. 

• 5+ years of relevant legal experience in privacy, healthcare, technology, product counseling, data protection, or related areas. 

• Extensive knowledge of HIPAA, HITECH, U.S. state privacy laws, and healthcare data privacy requirements. 

• Experience advising on privacy and legal issues involving technology products, SaaS platforms, healthcare technology, healthcare services, or other highly regulated environments. 

• Experience reviewing and negotiating privacy and data protection provisions, including BAAs and/or DPAs. 

• Ability to translate complex legal and regulatory concepts into practical, business-oriented guidance. 

• Strong judgment and ability to independently manage multiple priorities and stakeholders. 

• Excellent written, verbal, analytical, and interpersonal skills. 

Preferred 

• In-house legal experience within healthcare technology, SaaS, healthcare services, or another highly regulated industry. 

• Experience providing legal counsel directly to Product, Engineering, Technology, or Data teams. 

• Familiarity with AI, machine learning, advanced analytics, and emerging AI regulatory considerations. 

• Experience with privacy impact assessments, privacy-by-design frameworks, and data governance. 

• Experience supporting privacy or security incident responses. 

• IAPP certifications such as CIPP/US, CIPM, CIPT, or AIGP. 

WAYSTAR PERKS

• Competitive total rewards (base salary + bonus, if applicable)
• Customizable benefits package (3 medical plans with Health Saving Account company match)
• We offer generous paid time off for our non-exempt team members, starting with 3 weeks + 13 paid holidays, including 2 personal floating holidays. We also offer flexible time off for our exempt team members + 13 paid holidays
• Paid parental leave (including maternity + paternity leave)
• Education assistance opportunities and free LinkedIn Learning access
• Free mental health and family planning programs, including adoption assistance and fertility support
• 401(K) program with company match
• Pet insurance
• Employee resource groups

Waystar is proud to be an equal opportunity workplace. We celebrate, value, and support diversity and inclusion. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, marital status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.