Associate General Counsel, Programs and Privacy

Associate General Counsel, Programs and PrivacyNCQA is at an important point in its evolution as the nation's leading independent authority on healthcare quality. As NCQA modernizes its accreditation, measurement, data, research, digital quality, and enterprise operations, the legal function must be more than a traditional support function. It must be a strategic partner that helps the organization move with confidence, protect trust, manage risk, and translate complex legal, regulatory, privacy, and governance requirements into practical business solutions. The Associate General Counsel, Programs and Privacy will play a central role in that work. This leader will provide senior-level legal counsel across NCQA's programs, products, contracts, research activities, data practices, privacy obligations, corporate operations, and stakeholder-facing processes. The role requires sound legal judgment, business orientation, privacy and healthcare regulatory depth, and the ability to advise senior leaders in a fast-moving, mission-driven environment. This is not simply a legal advisory role. It is a strategic risk, business enablement, transformation, privacy, and enterprise counsel role at the center of NCQA's next chapter. The Associate General Counsel, Programs and Privacy serves as a senior attorney in the Office of General Counsel and as NCQA's designated Privacy Official. The position provides strategic, practical, and risk-informed legal counsel on privacy, healthcare regulatory, evaluation program, research, data governance, compliance, and operational matters. Working in partnership with the General Counsel, Enterprise Risk Management and Compliance Officer and other legal team members, this role helps NCQA achieve its mission while protecting the organization's legal, regulatory, operational, and reputational interests. The position translates complex legal and regulatory requirements into practical business guidance and serves as a trusted strategic advisor to leaders across the organization. This role is a peer to other Associate General Counsel positions and serves as the primary legal lead for privacy and data protection, healthcare and AI regulation, research, evaluation programs and litigation matters. Serve as NCQA's lead attorney for: Privacy, HIPAA and cybersecurity compliance Healthcare regulatory matters, including AIData governance and data-use issues Accreditation, certification and recognition legal support Regulatory and operational risk analysis Human subject research protections LitigationThe position helps ensure that NCQA's programs, products, research activities, data practices, and stakeholder-facing decisions remain legally sound, mission-aligned, and operationally effective. Strong strategic thinking, business enablement and transformation support skills are paramount. The Associate General Counsel, Programs & Privacy reports to the General Counsel, Enterprise Risk Management and Compliance Officer. The role works closely with leaders and teams across NCQA, including: Product and Customer Operations Information Security and Technology Product Development Quality Solutions PolicyResearchComplianceHuman Resources FinanceExecutive Leadership Serve as NCQA's Privacy Official and principal legal advisor on privacy, data protection, data governance, technology, and emerging issues, including: HIPAA compliance Privacy policies and procedures Privacy impact assessments Breach and incident response Business Associate Agreements Data Use Agreements Sensitive data classification Privacy training and awareness Monitoring federal and state privacy developments Technology-related legal considerations, information-sharing arrangements, and regulatory developments affecting technology-enabled programs Partner with Information Security and business leaders to support responsible innovation, and appropriate data governance controls while protecting NCQA's legal and reputational interests. Advise NCQA leaders and staff on healthcare regulatory, evaluation program, product, customer-facing, and operational matters, including: Healthcare regulatory requirements, including AIAccreditation and recognition activities Program operations Customer-facing processes Product development initiatives Survey and review activities Quality measurement activities Regulatory developments affecting NCQA programs Translate legal requirements into practical guidance that supports strategic and operational objectives. Advise NCQA business units regarding: Standards implementation Recognition, accreditation, and certification processes Reconsideration and appeals procedures Procedural fairness considerations Customer communications Legal risks affecting operational determinations Help maintain the integrity, defensibility, and transparency of stakeholder-facing programs. Provide legal counsel and support related to: Human Subject Research Protection Program activities Federal wide Assurance requirements Institutional Review Board processes Research determinations Research policies and training Data-sharing and publication activities Ethical and legal considerations involving data use Promote legally compliant and responsible research practices across NCQA.Partner with the General Counsel, Enterprise Risk Management Officer and Compliance Officer and organizational leaders to: Identify legal and regulatory risks Support compliance activities Participate in risk assessments Assist with investigations and dispute resolution Analyze emerging legal and regulatory developments Support litigation and other significant legal matters within the role's designated practice areas Provide legal recommendations that help the organization manage enterprise risks effectively. The Associate General Counsel, Programs and Privacy is expected to make independent legal recommendations and provide legal guidance regarding matters within the role's designated practice areas, including: Privacy determinations Regulatory interpretation Research compliance guidance Program integrity issues Data governance matters Operational legal advice The role may approve privacy-related policies, legal guidance, and routine matters within delegated authority. Significant organizational, governance, litigation, enterprise-risk, strategic-partnership, and Board-level matters remain subject to review by the General Counsel, Enterprise Risk Management Officer and Compliance Officer.