Principal Counsel, Regulatory & Privacy
Leads privacy, regulatory, consumer-protection, and broader in-house legal matters for a fast-growing sleep technology company. The role requires a JD, US bar membership, 8–12 years of experience with meaningful in-house work, and strong privacy and regulatory expertise.
About the job
Responsibilities
Privacy and Data Protection
- Build and run the global privacy program across applicable frameworks, including CCPA/CPRA and GDPR.
- Manage privacy disclosures, consent, records of processing, and data subject requests.
- Own vendor data processing agreements, cross-border transfers, data localization compliance, and the breach response playbook.
- Handle compliance for biometric and health data.
- Conduct privacy reviews for new features, integrations, and AI models.
Regulatory and Consumer Protection
- Own FTC and consumer-protection matters, including health and wellness claims, advertising review, and subscription and auto-renewal compliance.
- Advise on product registration, import, labeling, and disclosure requirements for new markets.
- Track medical-device and healthcare-regulatory issues, including FDA classification, corporate practice of medicine, anti-kickback, and HIPAA considerations.
- Help scope legal pathways for new product categories.
General Legal Counsel
- Support commercial contracts, litigation, product counseling, and other in-house legal matters.
- Act as embedded counsel to product and engineering teams.
- Help build the legal function and legal operations.
Requirements
- JD and active bar membership in at least one US state.
- 8–12 years of relevant experience, including meaningful in-house experience.
- Working knowledge of US privacy, including CCPA/CPRA, GDPR, FTC, and consumer protection.
- Experience as a versatile generalist across multiple in-house legal areas.
- Ability to independently investigate unfamiliar matters and advise the business directly.
- Comfortable building programs and processes in a fast-moving environment.
Nice-to-Haves
- In-house experience at a consumer technology, healthtech, wearable, or direct-to-consumer subscription company.
- Experience as a first or early regulatory or privacy hire.
- Biometric or health data experience.
- Cross-border transfer or data localization experience.
- Advertising, health-claims, or healthcare-regulatory experience.
- Familiarity with AI governance and emerging AI regulation.
- CIPP/US or CIPP/E certification.
Compensation and Benefits
- Salary range: $250,000–$325,000.
- Equity participation for full-time employees, with periodic performance-based equity refreshes.
- Company-provided Pod.
- Health, vision, and dental insurance for employees and dependents.
- Supplemental life insurance.
- Flexible PTO.
- Commuter benefits.
- Paid parental leave.
- Benefits may vary by location.
Skills
Ccpa/Cpra, GDPR, Ftc, HIPAA, Fda, Privacy Programs, Data Processing Agreements, Data Localization, Breach Response, Biometric Data, Health Data, Ai Governance, Consumer Protection, Advertising Compliance, Commercial Contracts
Similar jobs
Legal jobsLeads corporate governance, financings, equity administration, secondary transactions, and related corporate matters for a high-growth private AI company. Requires a JD, active US bar membership or California in-house eligibility, and at least 9 years of relevant experience.
Leads and builds AirOps’s legal function, advising executives and cross-functional teams on commercial transactions, AI and data issues, corporate matters, and risk. Requires 10+ years of legal experience, sophisticated technology transactions expertise, and California practice eligibility.
Leads commercial transactions and builds scalable contracting infrastructure while advising the company on privacy, AI regulation, compliance, and broader legal risks. Requires a JD, state bar membership, and at least five years of technology-focused legal experience.
Leads product, privacy, IP, and AI governance counseling for AI-enabled legal technology products, partnering with Product and Engineering from design through launch. Requires a JD, active bar membership, deep product or privacy experience, and preferably 12+ years of legal experience with at least five years in-house.
Leads Freshpaint’s legal function as its first in-house counsel, advising executives and cross-functional teams on commercial transactions, privacy, compliance, risk, and corporate matters. Requires a Juris Doctor, U.S. bar membership, and substantial in-house technology or SaaS experience.