Privacy and Product Counsel

Responsibilities

• Provide practical, product-focused counseling to teams building consumer and SMB experiences across tax, money, mid-market, and Business Services
• Embed privacy into product development by partnering with Product, Design, Engineering, Data Science/Analytics, Security, and Marketing from early concept through launch
• Advises on privacy-by-design controls including data minimization, purpose limitation, transparency, and customer choice
• Support privacy requirements tied to tax and financial data handling, including advising on tax return information confidentiality (e.g., IRC7216 and related rules) and related internal governance expectations
• Help teams navigate privacy implications of sensitive data, identity verification, and customer support/service journeys that touch regulated datasets
• Counsel on customer-facing disclosures and UX patterns (e.g., just-in-time notices, consent flows, preference centers, permissioning, and in-product education) to ensure experiences are clear, consistent, and defensible, and to reduce “dark pattern” risk
• Conduct and document privacy impact assessments and provide launch guidance, including risk framing, mitigations, and durable decision records
• Support data sharing and ecosystem questions (first/third-party, vendors, partners, internal platform services), including governance and contractual expectations (in partnership with commercial counsel as needed)
• Build and improve scalable tools, templates, playbooks, intake paths, and training, to help product teams move faster with confidence
• Establish strong working relationships with key stakeholders and drive alignment across competing points of view to reach practical outcomes
• Contribute toward the communication of the Privacy Team’s mission and vision to internal partners and stakeholders

Qualifications

• Demonstrated relevant legal experience (in-house and/or at a law firm)
• Strong working knowledge of relevant data privacy laws in the US (e.g., CCPA/CPRA, other state privacy laws, GLBA, etc.)
• Ability to coordinate cross-functionally, and with outside counsel in domestic and international markets, on issues related to data privacy, product design and functionality, transactional issues, and other technology initiatives
• Proven ability to translate complex legal requirements into forward-looking and actionable policies, frameworks and guidelines
• Able to engage in and document detailed analysis of data-driven products to understand and assess privacy and other legal risks
• A learning mindset and comfort operating in the gray
• Able to communicate with business partners about regulatory obligations, risk management processes and drive change

Pay

Expected salary for this role is $180,000 - $240,000, commensurate with experience, training, skills, qualifications, and other market factors.