The Healthcare Privacy and Compliance team advises leading healthcare organizations on complex privacy and cybersecurity matters, including ransomware attacks, business email compromises, regulatory investigations, HIPAA compliance, data governance, and artificial intelligence-related issues, operating at the intersection of healthcare, privacy, cybersecurity, regulatory compliance, and emerging technology.
The role involves advising healthcare organizations on privacy and cybersecurity incidents, coordinating incident response efforts with forensic investigators, notification vendors, crisis communications professionals, and law enforcement, and conducting breach assessments to counsel clients on state and federal notification obligations.
Responsibilities also include assisting healthcare clients with investigations and inquiries from federal and state regulators (e.g., U.S. Department of Health and Human Services Office for Civil Rights), counseling on HIPAA Privacy Rule and Security Rule compliance and broader privacy/data governance, developing incident response preparedness programs, and advising on emerging issues related to artificial intelligence, digital health technologies, and evolving privacy regulations.
Associates receive substantial responsibility, direct client interaction, and mentorship from nationally recognized leaders in healthcare privacy and cybersecurity law, with opportunities to collaborate across BakerHostetler's privacy, cybersecurity, healthcare, litigation, and regulatory practices.
Preferred qualifications include HIPAA privacy and security experience, incident response or cybersecurity counseling experience, experience working with healthcare industry clients, prior government, regulatory, judicial clerkship, or Am Law 200 experience, and privacy certifications such as CIPP/US.

Baker & Hostetler LLP

Junior-to-Mid-Level Healthcare Privacy and Compliance Associate

2-4 PQE · March 27, 2026 (5 months ago)

Baker & Hostetler LLP

2-4 PQE · March 27, 2026 (5 months ago)

Salary

$235,000 - $285,000

Employment type

Full-time

Practice area

Health Care · Cybersecurity · Data Privacy · HIPAA

Locations

Orlando · Atlanta · Cincinnati · Wilmington · District of Columbia · Columbus · Seattle · New York City · Houston · Austin · Dallas · Denver · Los Angeles · Orange County · San Francisco · Chicago · Philadelphia · Cleveland

Trusted recruiters

Work with a recruiter who has a real relationship with the hiring team and comes recommended by your peers.

Overview

The Healthcare Privacy and Compliance team advises leading healthcare organizations on complex privacy and cybersecurity matters, including ransomware attacks, business email compromises, regulatory investigations, HIPAA compliance, data governance, and artificial intelligence-related issues, operating at the intersection of healthcare, privacy, cybersecurity, regulatory compliance, and emerging technology.
The role involves advising healthcare organizations on privacy and cybersecurity incidents, coordinating incident response efforts with forensic investigators, notification vendors, crisis communications professionals, and law enforcement, and conducting breach assessments to counsel clients on state and federal notification obligations.
Responsibilities also include assisting healthcare clients with investigations and inquiries from federal and state regulators (e.g., U.S. Department of Health and Human Services Office for Civil Rights), counseling on HIPAA Privacy Rule and Security Rule compliance and broader privacy/data governance, developing incident response preparedness programs, and advising on emerging issues related to artificial intelligence, digital health technologies, and evolving privacy regulations.
Associates receive substantial responsibility, direct client interaction, and mentorship from nationally recognized leaders in healthcare privacy and cybersecurity law, with opportunities to collaborate across BakerHostetler's privacy, cybersecurity, healthcare, litigation, and regulatory practices.
Preferred qualifications include HIPAA privacy and security experience, incident response or cybersecurity counseling experience, experience working with healthcare industry clients, prior government, regulatory, judicial clerkship, or Am Law 200 experience, and privacy certifications such as CIPP/US.

Trusted recruiters

Top recruiter for this opening
Rebecca Glatzer
Major, Lindsey & Africa
Rebecca Glatzer
Major, Lindsey & Africa
Katy Lucas joined BakerHostetler’s Atlanta office in the Health Care group.
Rebecca was fantastic to work with. Consistently easy and fast communication, and her knowledge of the Atlanta legal market is unparalleled. I would recommend Rebecca to anyone and genuinely enjoyed the entire process!

View this job posting on the firm's site.

Last updated: August 25, 2026

Health Care in Orlando →Health Care →BakerHostetler →Browse all positions →