Product Counsel, Data & Privacy

Imprint

. Serve as the go-to legal advisor on partner data sharing and document guidance for Data and business teams .

Posted 10/21/2026full-timeUnited StatesMid-LevelSenior💰 $200,000 - $250,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in data privacy law, including GLBA/Regulation P and CCPA/CPRA, while providing actionable legal guidance on data-sharing arrangements and privacy compliance. Strong ability to collaborate with cross-functional teams and manage competing priorities in a fast-paced environment.

Highest-signal resume keywords

J.D. From An Accredited Law SchoolActive Membership In A U.S. State Bar4 To 8 Years In Data Privacy LawExpertise In GLBA/Regulation P And CCPAStrong Contract Review Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Privacy LawGLBA/Regulation PFCRAState Privacy LawsData Sharing AgreementsPrivacy NoticesData RetentionAutomated Decision-MakingConsumer Financial RegulationIncident Response

Soft Skills

Strong Communication SkillsCross-Functional Relationship BuildingAbility To Work AutonomouslyManage Competing PrioritiesResearch Independently

Tools & Technologies

Legal TechnologyProject Management SystemsAI-Assisted WorkflowsTicketing SystemsInformation Security Risk Assessments

Certifications & Qualifications

CIPP/US

Industry Keywords

Financial ServicesFintechConsumer PrivacyPrivacy FrameworksPCI DSSSOC 2NISTGDPR/ROPAECOA/Reg BConsumer Credit Products

About the role

Key responsibilities & impact

Serve as the go-to legal advisor on partner data sharing and document guidance for Data and business teams
Advise on privacy opt-outs and suppression obligations, including partner privacy files and downstream third parties
Maintain business-facing data-sharing and opt-out guides
Provide practical FCRA guidance on permissible purpose, credit reports, and application and credit-decision outcomes
Advise on GLBA/Regulation P and consumer privacy notices
Draft, review, and maintain privacy notices and cardholder information-sharing notices
Interpret state privacy laws, including CCPA/CPRA and emerging state regimes
Advise on automated-decision-making and AI requirements affecting data use, credit scoring, and product design
Own data retention and deletion guidance and support the record-retention policy
Partner with Security and GRC on information-security risk assessments, testing constraints, and incident response
Counsel Product and Engineering on features affecting data sharing, privacy, or customer experience
Draft consents and data-related terms
Coordinate with Compliance on regulatory interpretation, monitoring, and exam preparation
Support the Associate General Counsel on escalated complaints, regulatory inquiries, and bank-partner matters
Translate complex data, privacy, and security requirements into actionable cross-functional guidance
Build stakeholder relationships and take ownership of data-sharing and privacy reviews during the first 90 days

Requirements

What you’ll need

J.D. from an accredited law school
Active membership in good standing with at least one U.S. state bar
4 to 8 years in data privacy law
Demonstrated expertise in GLBA/Regulation P, FCRA, state privacy laws including CCPA, and consumer financial regulation
Experience in financial services, fintech, or a high-growth startup environment
Working knowledge of FCRA and GLBA/Regulation P
Familiarity with state privacy laws, including CCPA/CPRA and newer state regimes
Experience advising on data-sharing arrangements, privacy notices and opt-outs, and data retention
Strong contract review skills, including data sharing agreements, DPAs, and regulatory-facing documentation
Comfort partnering with security and information-security teams on vendor risk assessments, data protection, and incident response
Ability to work autonomously, own work end-to-end, manage competing priorities, and deliver clear legal guidance under tight timelines
Strong communication and cross-functional relationship-building skills
Willingness to research independently and verify findings with senior team members
Must be legally authorized to work in the United States
Privacy certification such as CIPP/US is nice to have
Experience with FCRA in lending or credit contexts, ECOA/Reg B adverse action, and automated decision-making/AI governance is nice to have
Familiarity with PCI DSS, SOC 2, NIST, breach/incident-response processes, additional consumer finance regulations, GDPR/ROPA, ticketing or project-management systems, legal technology, AI-assisted workflows, consumer credit products, and privacy frameworks is nice to have

Benefits

Comp & perks

Competitive compensation and equity packages
Leading configured work computers of your choice
Flexible paid time off
Fully covered, high-quality healthcare, including fully covered dependent coverage
Access to One Medical
Option to enroll in an FSA
20 weeks of paid parental leave for the primary caregiver
8 weeks of paid parental leave for all new parents
Access to industry-leading technology across all business units