Overview
This role is part of a Regulatory and Privacy Legal team that handles regulatory, privacy, and data protection issues affecting a large commerce platform. The team advises product and engineering groups on compliance with evolving global privacy laws, manages regulator inquiries, negotiates data practices with partners, and develops scalable internal privacy frameworks. The position reports to the Director of Privacy Legal.
Responsibilities
- Provide privacy legal counsel on complex product launches, new features, and strategic partnerships involving merchant and buyer data.
- Manage regulatory relationships and respond to privacy-specific inquiries from data protection authorities and US state enforcement agencies.
- Lead cross-functional privacy initiatives to advance the privacy program, including building resources, frameworks, and playbooks.
- Advise on data protection aspects of commercial agreements with merchants, vendors, and partners.
- Collaborate with Privacy Engineering and Trust teams on incident response, data governance, and compliance infrastructure.
- Maintain expertise in global privacy laws such as GDPR, CCPA, UK data protection, EU AI Act privacy implications, and emerging regulatory frameworks.
Requirements
- Qualifying law degree and license to practice law in the US or Canada.
- Minimum 8 years of relevant legal experience, ideally including law firm, government, and/or in-house roles.
- Substantial experience advising on privacy and data protection matters, including GDPR and CCPA.
- Strong technical curiosity to understand data flows and their compliance implications.
- Experience managing outside counsel.
- Ability to communicate complex privacy concepts clearly to diverse audiences including engineers and regulators.
- Strong judgment and comfort making decisions under uncertainty.
- Ability to build trust and collaborate across multiple teams such as product, engineering, legal, trust & safety, and finance.
- Pragmatic approach to regulatory risk, distinguishing between legal requirements and regulatory priorities.
Preferred Qualifications
- Privacy certifications such as CIPP/US, CIPP/E, or CIPM are a plus.
- Experience engaging with regulators or enforcement agencies on privacy matters.
- Experience advising on AI and data governance issues.
- Experience building or shipping products using AI tools.
- Familiarity with using AI tools for drafting, research, and legal work.
Compensation & Benefits
Details on compensation and benefits are not provided in this description.
Location
The role requires licensure to practice law in the US or Canada. Specific location or remote work details are not specified.