Principal Counsel, Regulatory & Privacy in New York at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Counsel, Regulatory & Privacy based in United States.

This is a high-impact in-house legal role focused on privacy, regulatory compliance, and consumer protection within a fast-growing technology environment.
You will build and lead programs covering data protection, advertising, subscriptions, healthcare regulation, and market expansion.
The role also requires a broad generalist mindset, with opportunities to advise on commercial contracts, litigation, product matters, and other legal priorities.
You’ll work closely with Product, Engineering, and business leaders to identify risks, develop practical solutions, and enable responsible growth.
As an early member of a lean legal function, you’ll have significant ownership and the opportunity to create processes rather than simply maintain established programs.
The environment is highly autonomous, fast-paced, and demanding, suited to an experienced lawyer who thrives on ambiguity and direct business partnership.
This opportunity is ideal for a self-starter who combines deep regulatory expertise with the versatility and judgment of a seasoned in-house generalist.

• Build, manage, and continuously improve a global privacy program covering applicable frameworks such as CCPA/CPRA, GDPR, and other privacy regimes.
• Develop and oversee privacy disclosures, consent practices, records of processing, data subject request processes, and related compliance programs.
• Manage data processing agreements, cross-border data transfers, data localization requirements, and privacy-related vendor matters.
• Develop and maintain breach response procedures and provide legal guidance on privacy and data security incidents.
• Advise on the collection and use of biometric and health data, including privacy reviews for new products, features, integrations, and AI models.
• Lead legal support for FTC requirements and consumer protection matters, including health and wellness claims, advertising practices, subscription terms, and auto-renewal compliance.
• Monitor regulatory requirements across markets, including product registration, importation, labeling, disclosures, and market-entry considerations.
• Advise on healthcare and medical-device regulatory matters as product offerings expand, including FDA classification, HIPAA, corporate practice of medicine, and anti-kickback considerations.
• Serve as embedded legal counsel to Product and Engineering teams, helping identify and address legal and regulatory considerations early in the development lifecycle.
• Provide support across broader in-house legal matters, including commercial contracts, litigation support, product counseling, and other emerging business needs.
• Partner with the existing legal team to establish legal operations, processes, policies, and scalable compliance infrastructure.
• Act as a practical business partner who balances legal risk with commercial objectives and provides clear, actionable recommendations.

• Juris Doctor (JD) degree and active bar membership in at least one U.S. state.
• 8–12 years of relevant legal experience, including meaningful in-house experience in a fast-moving business environment.
• Strong working knowledge of U.S. privacy law, including CCPA/CPRA, GDPR, FTC requirements, and consumer protection principles.
• Demonstrated experience managing privacy and regulatory matters independently and advising business stakeholders directly.
• Proven ability to operate as a versatile legal generalist, with experience extending beyond a single specialty into areas such as commercial contracts, litigation, or product counseling.
• Strong judgment, decision-making, and problem-solving skills, with the ability to navigate unfamiliar legal questions and determine practical paths forward.
• Comfortable working with limited process and significant autonomy, particularly in an environment where legal programs and infrastructure are still being built.
• Strong communication and interpersonal skills, with the ability to translate complex legal and regulatory requirements into clear business guidance.
• Experience at a consumer technology, healthtech, wearable, or direct-to-consumer subscription company is preferred.
• Experience as an early or first privacy/regulatory legal hire is a plus.
• Experience involving biometric data, health data, cross-border transfers, or data localization is highly desirable.
• Knowledge of advertising compliance, health claims, healthcare regulation, HIPAA, FDA/FTC considerations, or related regulatory frameworks is advantageous.
• Familiarity with AI governance and emerging AI regulation is preferred.
• CIPP/US or CIPP/E certification is a plus, but practical experience is valued more highly than additional credentials.
• Able to work effectively in a high-intensity environment with shifting priorities, substantial responsibility, and high expectations for execution.

• Competitive, equitable compensation aligned with experience and contribution.
• Equity participation for full-time employees, with periodic equity refresh opportunities based on performance.
• Health, dental, and vision insurance for employees and eligible dependents.
• Supplemental life insurance.
• Flexible paid time off.
• Paid parental leave.
• Commuter benefits where applicable.
• A company-provided sleep technology product for every full-time employee.
• Opportunity to work remotely within the United States, subject to applicable location requirements.
• Significant autonomy and immediate ownership over high-impact legal and regulatory initiatives.
• Accelerated professional growth within a lean legal function and rapidly evolving technology business.
• Direct collaboration with experienced professionals across Product, Engineering, and business functions.
• Opportunity to shape legal programs, processes, and compliance infrastructure from an early stage.
• An innovation-focused environment built around high standards, ambitious goals, and meaningful responsibility.