Overview

About the Role Healthcare is pacing the nation in AI adoption - from ambient clinical listening to automated utilization management - but it also faces the tightest regulatory tightrope of any industry. We are a boutique firm focused on the intersection of healthcare, technology, and data privacy and security law, and we are seeking an ambitious Associate Attorney to join us.This isn't a generic privacy or healthcare associate role. You'll work where HIPAA compliance meets cutting-edge machine learning, helping healthcare providers, hospital systems, and healthcare technology vendors deploy AI tools safely, architect modern privacy programs, negotiate complex transactions, and navigate security incidents in an era of aggressive federal and state enforcement.We're a small, specialized firm, and that's deliberate. There are no layers of associates standing between you and the client relationship, and no busywork that doesn't build your judgment. You don't need an existing book of business to join us. Your priority from day one is excellent legal work; developing your own client relationships over time is part of how you'll grow here. As you grow, so does your autonomy: associates here take on direct client responsibility faster than they typically would at a larger firm, working closely with firm leadership on sophisticated matters from early on.This role can be performed on-site at our Tampa, Florida office or remotely, so long as you are admitted to practice law in the state where you are physically located.Compensation:$100,000 - $160,000 yearlyResponsibilities: What You'll Work On Data Privacy Compliance and Technology TransactionsAI Compliance Counseling - Advising hospital systems, medical groups, and healthcare technology vendors on the legal risks, liabilities, and regulatory boundaries of integrating AI into clinical and administrative settings, including consent and data use/sharing questions.Federal and State Privacy Counseling - Interpreting and applying HIPAA, HITECH, and evolving state privacy laws; reviewing and revising Business Associate Agreements (BAAs); advising on privacy compliance programs.Data Security Breach Counseling - Representing clients through data security incidents, managing notification requirements, and mitigating risk during federal and state enforcement actions and investigations.Technology Transactions - Structuring and negotiating MSAs, data use agreements, vendor services agreements, and licensing agreements; drafting provisions tailored to specific deals and client needs.Federal Anti-Kickback Statute (AKS) and Stark Law ComplianceFraud and Abuse Counseling - Evaluating client business models, marketing practices, and commercial arrangements against the AKS, Stark, the False Claims Act, and related state laws.Physician Self-Referral Review - Advising physician practices on Stark, state mini-Stark laws, and self-referral prohibitions.Physician Licensing, Scope of Practice, and Professional RegulationCorporate Practice of Medicine (CPOM) - Structuring MSO agreements, technology contracts, and related arrangements to comply with state entity-ownership and physician-licensing requirements.Scope of Practice and Supervision - Counseling practices on state-specific rules for NPs, PAs, and other Advanced Practice Providers, including compensation structures and ownership.Qualifications: Who We're Looking For You have 3+ years of transactional and regulatory healthcare and technology experience, ideally including law firm experience, and you can:Take dense, evolving healthcare law and translate it into clear, actionable advice for non-technical stakeholders - providers, practice managers, software developers, and business teams alike.Draft and negotiate complex technology agreements, SaaS contracts, BAAs, and healthcare agreements without needing a playbook handed to you.Apply a strong working command of HIPAA, COPPA, and other federal and state privacy and security laws to real client situations,