Privacy Counsel

Overview

The organization is seeking an experienced U.S.-based Privacy Counsel to join its Legal Team. This role helps shape and scale the global privacy program as the organization expands internationally. Responsibilities include advising on privacy, data protection, and AI governance across products and operations, and supporting commercial transactions involving data processing and technology services.

Responsibilities

• Advise on global privacy and data protection laws, including CCPA/CPRA, HIPAA, and other U.S. and international regulatory frameworks.
• Advise on privacy and regulatory risks relating to AI systems, biometric data, voice technologies, and other sensitive data types.
• Partner with Product and Engineering teams to implement privacy-by-design principles and support responsible development of AI products.
• Conduct and oversee privacy risk assessments, including Data Protection Impact Assessments (DPIAs) and related documentation.
• Support commercial transactions by advising on data protection terms, including Data Processing Addendums (DPAs), Business Associate Agreements (BAAs), cross-border data transfers, and privacy provisions in customer agreements.
• Monitor and interpret evolving legal and regulatory developments relating to privacy, AI governance, and data use, and translate them into practical guidance for the business.
• Help develop and maintain privacy policies, procedures, and governance frameworks.
• Support responses to privacy-related regulatory inquiries, audits, and incidents in coordination with Security and Safety teams.

Requirements

• JD with active membership in at least one U.S. state bar (New York preferred).
• 6+ years of relevant legal experience, focused on privacy compliance and data governance.
• Experience advising AI, technology, or SaaS companies on global privacy compliance and data governance.
• Experience advising on U.S. biometric privacy laws and regulatory requirements, including laws governing biometric identifiers and information.
• Experience advising on HIPAA, healthcare privacy, PHI, and BAAs—particularly in connection with technology or SaaS products.
• Experience advising on AI, data use, or emerging technology regulatory frameworks is a strong plus.
• Familiarity with security and privacy frameworks such as SOC 2, ISO 27001, or similar.
• Excellent communication, stakeholder management, and problem-solving skills.

Preferred Qualifications

• Interest in the future of AI and emerging technologies, with strong ownership and enthusiasm for applying privacy law to cutting-edge products.
• Comfortable navigating fast-paced, high-growth environments with evolving regulatory landscapes.
• Ability to translate complex legal requirements into clear, practical guidance for product and business teams.
• Collaborative, pragmatic, and solutions-oriented approach with a commitment to enabling innovation responsibly.

Compensation & Benefits

• Annual discretionary stipend for professional development.
• Annual discretionary stipend for social travel to meet up with colleagues each year, however you choose.
• Annual company offsite (past offsites have included Croatia and Italy).
• Monthly co-working stipend if not located near one of the main hubs.

Location

Remote and can be executed in the United States. Strong preference for the Eastern time zone, ideally New York.