Product Counsel

Clay · Vertical AI · New York, NY · Legal

Product Counsel role at an AI company focused on privacy matters related to products, evaluating data processing practices, optimizing compliance strategies, and collaborating with cross-functional teams. Requires legal expertise in global privacy laws like GDPR and CCPA/CPRA, and experience with privacy-by-design principles.

What you'd actually do

  1. Apply and evolve best practices for handling company and people datasets, give guidance on data transformations, sanitization, and removal, empower customers as data controllers to ensure compliance with global privacy laws, including GDPR, CCPA/CPRA, and relevant state-specific regulations. Lead privacy impact assessments (PIAs) and data protection impact assessments (DPIAs).
  2. Partner with product managers, engineers, and marketing teams to translate legal requirements into actionable product specifications. Provide real-time advice during high-stakes decisions, such as launching new features involving data processing.
  3. Conduct thorough reviews of product roadmaps and features to identify privacy implications. Advise on lawful bases for data processing, cross-border data transfers, and data subject rights (e.g., access, deletion, opt-out). Develop and implement privacy-by-design principles to embed compliance into product development cycles.
  4. Build and maintain strong relationships with data partners, vendors, and third-party service providers. Evaluate privacy risks in data sharing agreements, perform due diligence on vendor compliance, and negotiate contracts to include robust data protection clauses. Work with the broader compliance and legal teams to ensure regulatory and contractual adherence.
  5. Support incident response for privacy-related issues, including notifications of stakeholders. Design and deliver training programs for internal teams on privacy best practices, fostering a culture of compliance.

Skills

Required

  • Juris Doctor (JD) degree
  • active bar membership
  • 5-7 years of experience as a product counsel in a tech or SaaS environment
  • Experience with outbound marketing or data-driven products
  • Deep understanding of privacy frameworks such as GDPR, CCPA, HIPAA (if applicable), and emerging laws

What the JD emphasized

  • privacy
  • data processing
  • GDPR
  • CCPA/CPRA
  • privacy-by-design