Direct Care and Treatment (DCT) operates a diverse system of direct care and treatment programs and services and maintains significant volumes of government data, including protected health information, health records, private and confidential government data, employee information, client information, treatment-related information, and other legally protected data. This position exists to provide legal research, analysis, and advice concerning assigned suspected or confirmed data security incidents, data privacy, public data requests, requests for access or disclosure and related data governance matters to the DCT Data Privacy Office (DPO). The legal issues presented in the position generally involve the interpretation and application of statutes, administrative rules, court decisions, and other legal authorities to particular, routine and moderately complex facts and circumstances. As a Data Privacy and Practices Attorney, you will: • Conduct the legal research necessary to resolve assigned issues, exercise judgment in analyzing assigned matters, and identify legally supportable options within the established area of data privacy and related law. • Interpret and apply to the Minnesota Government Data Practices Act (MGDPA), Minnesota Health Records Act (MHRA), Health Insurance Portability and Accountability Act (HIPAA) and other applicable state and federal requirements to assigned matters. • Analyze the interaction of applicable laws and provide legally supportable options and recommendations to the Data Privacy Manager, Deputy General Counsel, and appropriate DCT staff.

• JD degree from an ABA accredited law school; AND • Current license and in good standing to practice law in Minnesota; AND • One (1) year experience as a licensed attorney. Experience must demonstrate: o Experience conducting legal research, writing and analysis; and providing legal advice. o Knowledge of or ability to develop working knowledge of the Minnesota Government Data Practices Act (MGDPA), HIPAA, Minnesota health records and privacy laws, and other laws governing data privacy, confidentiality, and disclosure. o Knowledge of principles and practices of professional legal ethics and attorney-client relationships.

• Experience providing legal advice regarding data privacy, data practices, records management, or information governance, particularly under the Minnesota Government Data Practices Act (MGDPA), HIPAA, or other state and federal privacy laws. • Experience leading or coordinating complex data privacy or records-related projects involving multiple business areas, legal, technology, and other stakeholders. • Experience with electronic discovery, document review, records searches, data collection, or e-discovery/document review platforms. • Experience analyzing complex or emerging data privacy issues and developing practical recommendations to address legal, operational, and technology considerations. • Experience working with information technology or cybersecurity professionals to address data privacy, data security, electronic records, or data-management issues. • Experience developing, implementing, or improving policies, procedures, standards, or processes related to data privacy, records, information governance, or electronic discovery. • Experience working in a government, public-sector, healthcare, or similarly highly regulated environment. • Our employees are dedicated to ensuring cultural responsiveness. Preferred candidates will have a variety of experiences working effectively with others from different backgrounds and cultures.

Available upon request.