Principal Counsel, Regulatory & Privacy

Accountabilities:

• • Build, manage, and continuously improve a global privacy program covering applicable frameworks such as CCPA/CPRA, GDPR, and other privacy regimes.
  • Develop and oversee privacy disclosures, consent practices, records of processing, data subject request processes, and related compliance programs.
  • Manage data processing agreements, cross-border data transfers, data localization requirements, and privacy-related vendor matters.
  • Develop and maintain breach response procedures and provide legal guidance on privacy and data security incidents.
  • Advise on the collection and use of biometric and health data, including privacy reviews for new products, features, integrations, and AI models.
  • Lead legal support for FTC requirements and consumer protection matters, including health and wellness claims, advertising practices, subscription terms, and auto-renewal compliance.
  • Monitor regulatory requirements across markets, including product registration, importation, labeling, disclosures, and market-entry considerations.
  • Advise on healthcare and medical-device regulatory matters as product offerings expand, including FDA classification, HIPAA, corporate practice of medicine, and anti-kickback considerations.
  • Serve as embedded legal counsel to Product and Engineering teams, helping identify and address legal and regulatory considerations early in the development lifecycle.
  • Provide support across broader in-house legal matters, including commercial contracts, litigation support, product counseling, and other emerging business needs.
  • Partner with the existing legal team to establish legal operations, processes, policies, and scalable compliance infrastructure.
  • Act as a practical business partner who balances legal risk with commercial objectives and provides clear, actionable recommendations.

  Requirements:

  • Juris Doctor (JD) degree and active bar membership in at least one U.S. state.
  • 8–12 years of relevant legal experience, including meaningful in-house experience in a fast-moving business environment.
  • Strong working knowledge of U.S. privacy law, including CCPA/CPRA, GDPR, FTC requirements, and consumer protection principles.
  • Demonstrated experience managing privacy and regulatory matters independently and advising business stakeholders directly.
  • Proven ability to operate as a versatile legal generalist, with experience extending beyond a single specialty into areas such as commercial contracts, litigation, or product counseling.
  • Strong judgment, decision-making, and problem-solving skills, with the ability to navigate unfamiliar legal questions and determine practical paths forward.
  • Comfortable working with limited process and significant autonomy, particularly in an environment where legal programs and infrastructure are still being built.
  • Strong communication and interpersonal skills, with the ability to translate complex legal and regulatory requirements into clear business guidance.
  • Experience at a consumer technology, healthtech, wearable, or direct-to-consumer subscription company is preferred.
  • Experience as an early or first privacy/regulatory legal hire is a plus.
  • Experience involving biometric data, health data, cross-border transfers, or data localization is highly desirable.
  • Knowledge of advertising compliance, health claims, healthcare regulation, HIPAA, FDA/FTC considerations, or related regulatory frameworks is advantageous.
  • Familiarity with AI governance and emerging AI regulation is preferred.
  • CIPP/US or CIPP/E certification is a plus, but practical experience is valued more highly than additional credentials.
  • Able to work effectively in a high-intensity environment with shifting priorities, substantial responsibility, and high expectations for execution.

  Benefits:

  • Competitive, equitable compensation aligned with experience and contribution.
  • Equity participation for full-time employees, with periodic equity refresh opportunities based on performance.
  • Health, dental, and vision insurance for employees and eligible dependents.
  • Supplemental life insurance.
  • Flexible paid time off.
  • Paid parental leave.
  • Commuter benefits where applicable.
  • A company-provided sleep technology product for every full-time employee.
  • Opportunity to work remotely within the United States, subject to applicable location requirements.
  • Significant autonomy and immediate ownership over high-impact legal and regulatory initiatives.
  • Accelerated professional growth within a lean legal function and rapidly evolving technology business.
  • Direct collaboration with experienced professionals across Product, Engineering, and business functions.
  • Opportunity to shape legal programs, processes, and compliance infrastructure from an early stage.
  • An innovation-focused environment built around high standards, ambitious goals, and meaningful responsibility.