Privacy Counsel II

Overview

This role is a key position on the legal team, focused on privacy matters. The Privacy Counsel II will exercise independent judgment on complex privacy issues, help develop Privacy Program objectives, and provide practical, timely, and strategic legal advice. The role involves staying current on relevant data privacy laws and regulations and collaborating with cross-functional teams.

Responsibilities

• Counsel on privacy assessments and product-related matters, resolving significant issues and evaluating business implications by applying broad expertise in privacy.
• Develop training, playbooks, and FAQ libraries for various teams to ensure they have current privacy guidance.
• Serve as a subject matter expert on privacy law, providing high-quality legal advice on data privacy and security matters.
• Monitor, brief, and advise on privacy laws and new legislative and regulatory developments, including:
  • Leading development and updates to policies and procedures
  • Developing and updating internal work plans to comply with upcoming data privacy regulations
• Lead review of marketing initiatives to ensure compliance with data protection laws.
• Lead Privacy Program initiatives and risk management workstreams from start to finish, with accountability for results that may impact the entire function.
• Lead reviewing, drafting, and negotiating privacy and data security contract terms with business partners and vendors, including data processing agreements and data protection provisions.
• Act as an internal privacy subject matter expert by building cross-functional networks and providing thought leadership on broader organizational initiatives, applying knowledge of business priorities to influence stakeholders.
• Support vendor management for privacy, including managing vendor offboarding.

Requirements

• JD and admission to a state bar.
• 8+ years of relevant in-house or law firm experience focused on data privacy matters.
• Comprehensive understanding and experience advising on data privacy laws and related statutes, regulations, and guidance, including the CCPA, TCPA, and CAN-SPAM, as well as newer data privacy regulations.
• Experience advising on direct-to-consumer product and marketing initiatives from a privacy perspective.
• Experience working cross-functionally on compliance matters, including coordinating across teams and influencing diverse stakeholders.
• Experience drafting and negotiating data protection agreements and provisions.
• Comfortable working in a fast-paced, high-growth environment, including handling tasks and questions that may be unfamiliar.
• Willingness to take ownership and drive projects from start to finish.

Preferred Qualifications

• Experience in the healthcare space, especially direct-to-consumer healthcare.

Compensation & Benefits

• San Francisco and Seattle Offices: $218,000.00 - $350,000.00
• New York Office: $200,000.00 - $321,000.00
• Santa Monica Office: $182,000.00 - $292,000.00
• Other Office Locations: $164,000.00 - $263,000.00

Pay ranges are determined based on work location and may vary depending on where the successful candidate is hired. Starting pay is determined based on job-related skills, experience, qualifications, and other relevant business and organizational factors. Pay zones may be modified in the future.

Additional compensation may include annual cash bonuses or commission and annual equity grants for most positions.

Benefits include:

• Medical, dental, and vision insurance
• 401(k) with a company match
• ESPP
• Unlimited vacation
• 13 paid holidays
• 72 hours of sick leave
• Mental wellness and financial wellness programs
• Fertility benefits
• Generous parental leave
• Pet insurance
• Supplemental life insurance for you and your dependents
• Company-paid short-term and long-term disability
• And additional benefits

Location

San Francisco and Seattle Offices; New York Office; Santa Monica Office; and other office locations (compensation ranges vary by location).

Notes

All employees are responsible for reviewing and complying with safety and security policies and procedures, being vigilant for potential security threats (including phishing attempts), and proactively communicating with the Security Team to raise concerns.

Reasonable accommodations are available for candidates with disabilities during the recruiting process.

Candidate safety: official communication is sent only from specific company email addresses.