Product, Privacy and Regulatory Counsel

Overview

This role involves serving as Product, Privacy, and Regulatory Counsel, focusing on the intersection of product innovation, data privacy, and regulatory compliance. The position requires close collaboration with Product, Engineering, Security, Telephony, Marketing, Sales, and Customer Success teams to integrate legal judgment into the design, launch, and scaling of AI-powered products globally. The counsel will also develop frameworks, playbooks, and guardrails to establish the organization as a trustworthy, enterprise-ready AI platform.

This position reports to the Assistant General Counsel and is based in San Ramon, CA. It offers the opportunity to work within a collaborative legal team supported by outside counsel and cross-functional partners, with direct exposure to the executive team and enterprise customers.

Responsibilities

• Provide AI governance and product counseling by advising Product and Engineering teams on privacy-by-design, AI governance, and regulatory risks throughout the product lifecycle.
• Support development of legal frameworks related to AI training data, large language model (LLM) data use, model governance, and compliance with the EU AI Act, US state AI laws, and FTC guidance.
• Support the global privacy compliance program, including GDPR/UK GDPR, CCPA/CPRA, HIPAA, and other regulations.
• Manage data subject access request programs, maintain Data Protection Impact Assessments (DPIAs) and Records of Processing Activities (RoPAs), and serve as on-call counsel for data incidents, including breach response and notifications.
• Advise on federal and state telecom regulations such as FCC, TCPA, 911, USF; monitor international regulatory developments; and handle CALEA readiness, law enforcement requests, and sectoral compliance.
• Partner with Security and Governance, Risk, and Compliance (GRC) teams on certifications including ISO 27001, SOC 2, PCI, and HIPAA.
• Assist in designing privacy-enhancing controls such as automated redaction, anonymization, and access governance.
• Handle Data Processing Agreement (DPA) and Business Associate Agreement (BAA) negotiations.
• Support complex enterprise transactions and advise on marketing compliance including TCPA, CIPA, web tracking, consent signals, and digital advertising.
• Participate in the Patent Review Board, coordinate patent prosecution with outside counsel, contribute to internal policies, and drive legal operations scalability through automation and AI tools.

Requirements

• Juris Doctor (J.D.) degree from an ABA-accredited law school.
• Active bar membership in one or more U.S. states.
• Minimum of 6 years of relevant legal experience, ideally including time at a recognized law firm with a technology or privacy practice and in-house experience at a SaaS or technology company.
• Deep expertise in GDPR, CCPA/CPRA, and HIPAA, including privacy-by-design and cross-border data transfers.
• Familiarity with AI legal frameworks such as the EU AI Act, US state AI legislation, and FTC priorities.
• Proven ability to communicate complex legal concepts to non-legal audiences.
• Experience advising Product and Engineering teams on product, privacy, and regulatory matters.
• Knowledge of FCC, TCPA, VoIP regulations, or communications products such as call recording, telecom, or voice/AI-enabled workflows.
• Experience with incident response and breach notification under US state laws and GDPR.

Preferred Qualifications

• Privacy certifications such as CIPP/US, CIPP/E, or equivalent.

Compensation & Benefits

• Competitive salary.
• Comprehensive benefits package.
• Opportunities for professional growth.

Location

• San Ramon, California, USA