Principal Counsel, Regulatory & Privacy

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Counsel, Regulatory & Privacy based in United States. This is a high-impact in-house legal role focused on privacy, regulatory compliance, and consumer protection within a fast-growing technology environment. You will build and lead programs covering data protection, advertising, subscriptions, healthcare regulation, and market expansion. The role also requires a broad generalist mindset, with opportunities to advise on commercial contracts, litigation, product matters, and other legal priorities. You’ll work closely with Product, Engineering, and business leaders to identify risks, develop practical solutions, and enable responsible growth. As an early member of a lean legal function, you’ll have significant ownership and the opportunity to create processes rather than simply maintain established programs. The environment is highly autonomous, fast-paced, and demanding, suited to an experienced lawyer who thrives on ambiguity and direct business partnership. This opportunity is ideal for a self-starter who combines deep regulatory expertise with the versatility and judgment of a seasoned in-house generalist. Build, manage, and continuously improve a global privacy program covering applicable frameworks such as CCPA/CPRA, GDPR, and other privacy regimes. Develop and oversee privacy disclosures, consent practices, records of processing, data subject request processes, and related compliance programs. Manage data processing agreements, cross-border data transfers, data localization requirements, and privacy-related vendor matters. Develop and maintain breach response procedures and provide legal guidance on privacy and data security incidents. Advise on the collection and use of biometric and health data, including privacy reviews for new products, features, integrations, and AI models. Lead legal support for FTC requirements and consumer protection matters, including health and wellness claims, advertising practices, subscription terms, and auto-renewal compliance. Monitor regulatory requirements across markets, including product registration, importation, labeling, disclosures, and market-entry considerations. Advise on healthcare and medical-device regulatory matters as product offerings expand, including FDA classification, HIPAA, corporate practice of medicine, and anti-kickback considerations. Serve as embedded legal counsel to Product and Engineering teams, helping identify and address legal and regulatory considerations early in the development lifecycle. Provide support across broader in-house legal matters, including commercial contracts, litigation support, product counseling, and other emerging business needs. Partner with the existing legal team to establish legal operations, processes, policies, and scalable compliance infrastructure. Act as a practical business partner who balances legal risk with commercial objectives and provides clear, actionable recommendations. Requirements: Juris Doctor (JD) degree and active bar membership in at least one U.S. state. 8–12 years of relevant legal experience, including meaningful in-house experience in a fast-moving business environment. Strong working knowledge of U.S. privacy law, including CCPA/CPRA, GDPR, FTC requirements, and consumer protection principles. Demonstrated experience managing privacy and regulatory matters independently and advising business stakeholders directly. Proven ability to operate as a versatile legal generalist, with experience extending beyond a single specialty into areas such as commercial contracts, litigation, or product counseling. Strong judgment, decision-making, and problem-solving skills, with the ability to navigate unfamiliar legal questions and determine practical paths forward. Comfortable working with limited process and significant autonomy, particularly in an environment where legal programs a