Senior Counsel (Healthcare Regulatory, Privacy & Employment)

The Role

We are seeking a Senior Counsel (Healthcare Regulatory, Privacy & Employment), to serve as a practical, business-oriented advisor across Midi’s clinical, operational, people, product, and commercial functions. In this role, you will help Midi navigate the evolving legal and regulatory landscape of a high-growth digital health company while building scalable processes that support clinicians, employees, patients, and the business.

The ideal candidate brings deep healthcare regulatory experience, sound business judgment, strong communication skills, and the ability to move seamlessly between strategic counsel and hands-on execution.

Key Responsibilities

Healthcare Regulatory & Clinical Operations

• Advise on federal and state healthcare regulatory matters affecting Midi’s virtual care clinic, clinicians, patients, and supplement-related activities.
• Monitor and advise on requirements involving telehealth, physician and nurse practitioner licensing, scope of practice, corporate practice of medicine, fee splitting, professional entities, prescribing, pharmacy operations, compounded products, and patient communications.
• Support regulatory analysis relating to hormone therapy, non-hormonal medications, supplements, compounded cosmetics, clinical protocols, patient education, marketing claims, and consumer-facing materials.
• Partner with Clinical and Operations teams on clinician onboarding, licensing, credentialing, supervision, delegation, medical practice governance, and regulatory documentation.
• Advise on relationships with health plans, employers, benefits platforms, pharmacies, laboratories, and other healthcare partners.
• Coordinate with outside healthcare regulatory counsel on specialized or high-risk matters and manage work product for practical implementation.

Privacy, Data Protection & Security

• Advise on HIPAA, state health privacy laws, consumer privacy laws, marketing privacy, digital health data, and data-sharing arrangements.
• Review and negotiate business associate agreements, data processing agreements, privacy addenda, security exhibits, patient-facing notices, vendor terms, and clinical data-use provisions.
• Support privacy-by-design reviews for products, websites, patient tools, marketing initiatives, analytics, artificial intelligence, and new business models.
• Partner with Information Security, Product, Engineering, and Operations on incident response, breach analysis, data retention, and regulatory inquiries.
• Maintain practical privacy guidance, templates, playbooks, and training for business and clinical stakeholders.

Employment & Workforce Matters

• Partner with People and business leaders on employment agreements, offer letters, contractor arrangements, restrictive covenants, separations, workplace policies, investigations, and employee relations matters.
• Advise on wage-and-hour issues, worker classification, leave, accommodations, workplace conduct, pay practices, and multistate workforce requirements.
• Support the legal aspects of clinician employment and contractor relationships, including licensing, supervision, confidentiality, intellectual property, and professional obligations.
• Coordinate with outside employment counsel on investigations, agency matters, executive issues, and other specialized matters.

Compliance, Policy & Legal Operations

• Help build and maintain compliance policies, procedures, training, risk assessments, and monitoring programs.
• Translate legal and regulatory requirements into clear guidance, approval workflows, and operational controls.
• Maintain regulatory trackers, matter summaries, escalation protocols, and documentation standards.
• Identify recurring legal questions and convert them into templates, playbooks, and self-service guidance.
• Support legal department initiatives involving legal technology, contract workflows, knowledge management, and responsible use of artificial intelligence.

Cross-Functional Legal Advice

• Serve as a trusted legal partner to Clinical, Operations, Product, Marketing, People, Finance, Information Security, Commercial, and Executive Leadership teams.
• Provide clear recommendations that distinguish routine matters from issues requiring executive or outside counsel escalation.
• Research and monitor legal, regulatory, and enforcement developments affecting digital health and women’s healthcare.

What We’re Looking For

Required Qualifications

• Education & License: J.D. from an accredited law school and active membership in good standing in at least one U.S. state bar (California bar membership preferred).
• Experience: 8+ years of practicing legal experience.
• Domain Expertise: Substantive healthcare regulatory and privacy experience (including HIPAA and state health privacy laws), advising healthcare providers, digital health platforms, telehealth businesses, health plans, or healthcare-focused law firms.
• Practice Background: Experience working in-house at a digital health or healthcare company, at a major law firm, or a combination of both.
• Workforce & Operations: Demonstrated experience supporting multistate or remote clinical/employee workforces.
• Technology: Proficiency using artificial intelligence tools responsibly to enhance efficiency and work quality.

Preferred Qualifications

• Experience in women’s health, virtual care, menopause care, pharmacy/prescription products, or consumer health products.
• Familiarity with FDA, DEA, FTC, OCR, state medical boards, or state nursing boards.
• Proven track record of building compliance programs, legal playbooks, and operational workflows from the ground up.

Key Competencies

• Commercial Mindset: Ability to balance legal risk with business goals and provide clear, actionable guidance.
• Prioritization: Strong issue-spotting and organizational skills with the ability to manage competing priorities in a fast-paced environment.
• Communication: Ability to convey complex legal concepts simply to non-lawyer stakeholders and executive leadership.

Why Join Midi Health?

Midlife women’s health has been neglected by traditional healthcare for far too long. At Midi, we are changing that by building the nation’s leading virtual care clinic dedicated to menopause and midlife care—one of the fastest-growing sectors in digital health.

As Senior Counsel for Healthcare Regulatory, Privacy & Employment, you will sit at the very center of our operations—shaping how we deliver telehealth, protect sensitive health data, and support a nationwide workforce of specialized clinicians. You won’t just react to regulatory shifts; you’ll build the scalable compliance, privacy, and clinical governance infrastructure that enables Midi to expand safely and rapidly. If you’re looking for a role where your regulatory expertise directly safeguards patients, empowers clinicians, and unlocks company growth, we’d love to connect.