Job Description

At Bristol Myers Squibb, we are inspired by a single vision – transforming patients’ lives through science. In oncology, hematology, immunology and cardiovascular disease – and one of the most diverse and promising pipelines in the industry – each of our passionate colleagues contribute to innovations that drive meaningful change. We bring a human touch to every treatment we pioneer. Join us and make a difference.

At Bristol Myers Squibb, we are inspired by a single vision – transforming patients’ lives through science. In oncology, hematology, immunology and cardiovascular disease – and one of the most diverse and promising pipelines in the industry – each of our passionate colleagues contribute to innovations that drive meaningful change. We bring a human touch to every treatment we pioneer. Join us and make a difference.

This position, within the Patient, Data and Privacy Law group of Bristol-Myers Squibb (BMS), a biopharmaceutical company, will be responsible for providing privacy legal support to multiple stakeholders across business teams and functions within BMS, including the research and development and commercial teams. The person in this role will also provide global legal support to teams responsible for launching products in markets outside the United States. The individual should provide excellent, timely, pragmatic, and solution-oriented advice to clients appropriately balancing benefits and risks consistent with BMS legal obligations and ethical principles.

Roles & Responsibilities:

• Provide US and global data privacy law advisory support with particular emphasis on HIPAA/HITECH, CMIA, CCPA and GDPR. 
• Provide implementation and advisory support with respect to emerging state privacy laws including the California Privacy Rights Act, the Virginia Consumer Data Protection Act, and the Colorado Privacy Act.
• Negotiate data processing agreements and assist teams across BMS with the privacy terms needed for compliant privacy template development (e.g. data processing agreements/addendums or other contracts with privacy provisions such as master collaboration, lab services, data sharing and SaaS agreements).
• Draft review and advise on  privacy-related notices, policies, forms, authorizations, consents, and terms of use.
• Provide proactive and strategic legal and privacy advice regarding the generation and sharing of clinical trial data, acquisition and management of third-party sourced data and conduct of global clinical trials.
• Provide advice on the development and deployment of evolving technology solutions, such as mobile applications and artificial intelligence to enable the to support development and launch of innovative products and services in compliance with privacy and security legal obligations.
• Review data privacy impact assessments and other documentation and determine sufficiency of privacy mitigation processes and controls related to product development, launch and execution in alignment with the BMS decision-making model.
• Provide advisory assistance to the Data Protection Office by evaluating whether security incidents trigger supervisory and/or data subject notification.
• Manage the effort to build efficiencies in Global Data Privacy’s workload (e.g., develop core templates, engagement playbook, privacy guidance, training & awareness materials).
• Support BMS strategic objectives focusing on business growth and portfolio renewal. Provide privacy support in key areas and for new initiatives and projects including product-related launches, patient support activities, marketing campaigns and social media, and developing digital capabilities.
• Leverage knowledge of emerging legal and industry issues and trends to inform advice and address potential legal risk.
• Collaborate across the Law Department matrix to ensure delivery of seamless, comprehensive legal advice which reflects recent changes in global data privacy law. Support will require the lawyer to liaise with SCT Legal, Global Procurement Services and Business Development to improve the Privacy Legal Escalation process.

Requirements

• J.D. with membership in good standing in at least one state bar in the U.S. (NJ preferred; non-NJ licensed attorney must obtain an NJ limited in-house counsel license upon hire).
• Candidate should have a minimum of 5 years of legal experience, preferably at a research institution, another pharmaceutical company, or with a law firm that advises pharmaceutical, biotech, or medical research institutions.
• Candidate should have extensive knowledge of US privacy laws especially HIPAA/HITECH, CCPA and CMIA functional knowledge of General Data Protection Regulation with demonstrated experience applied to global clinical  trials, drug and product development, and technology solutions.
• Candidate should have experience working with technology department to support and provide advice with respect to the implementation of PrivacybyDesign. 
• Candidate should have experiencing providing advice related to data sharing arrangements and working knowledge of requirements and standards related to anonymization, pseudonymization and de-identification in  commercial and clinical settings.
• CIPP/CIPM/CIPT certification (or equivalent) preferred.
• Candidate should have excellent interpersonal skills, excellent oral and written communication skills, qualities as a self-starter, and the ability to work well both independently and as part of a team.
• Candidate must demonstrate high integrity, ability to assess risk, ability to think strategically and creatively, and ability to collaborate with legal and business colleagues.
• Successful candidate must have excellent judgment and the ability to identify and resolve complex issues, involving others that may possess the needed expertise to address issues as required
• Candidate must show commitment to Bristol Myers Squibb’s mission and values.

Around the world, we are passionate about making an impact on the lives of patients with serious diseases. Empowered to apply our individual talents and diverse perspectives in an inclusive culture, our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. 

Physical presence at the BMS worksite or physical presence in the field is an essential job function of this role which the Company deems critical to collaboration, innovation, productivity, employee well-being and engagement, and enhances the Company culture.

To protect the safety of our workforce, customers, patients and communities, the policy of the Company requires all employees and workers in the U.S. and Puerto Rico to be fully vaccinated against COVID-19, unless they have received an exception based on an approved request for a medical or religious reasonable accommodation.  Therefore, all BMS applicants seeking a role located in the U.S. and Puerto Rico must confirm that they have already received or are willing to receive the full COVID-19 vaccination by their start date as a qualification of the role and condition of employment.  This requirement is subject to state and local law restrictions and may not be applicable to employees working in certain jurisdictions such as Montana. This requirement is also subject to discussions with collective bargaining representatives in the U.S.

Our company is committed to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace adjustments and ongoing support in their roles. Applicants can request an approval of accommodation prior to accepting a job offer. If you require reasonable accommodation in completing this application or if you are applying to a role based in the U.S. or Puerto Rico and you believe that you are unable to receive a COVID-19 vaccine due to a medical condition or sincerely held religious belief, during or any part of the recruitment process, please direct your inquiries to adastaffingsupport@bms.com. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement.

Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.