Director, Product and Privacy

Accountabilities:

You will provide strategic legal counsel on product development, privacy, AI governance, and industry-specific compliance, ensuring that innovative products are designed and deployed responsibly across applicable markets.

• Partner with Product, Engineering, AI, Security, Marketing, Partnerships, and Legal teams to understand product strategies, roadmaps, and initiatives, providing guidance from early design through launch, deployment, and ongoing monitoring.

• Advise on product compliance matters involving artificial intelligence, privacy, data rights, intellectual property, consumer protection, and applicable regulatory requirements.

• Structure, negotiate, and review agreements with AI providers, data partners, and integration partners, including product terms, data processing agreements, and business associate agreements.

• Guide product design and modifications by identifying legal and regulatory risks, recommending mitigation strategies, reviewing user experiences and disclosures, and translating legal guidance into implementable product requirements.

• Develop and operationalize scalable product, privacy, and AI review processes, including impact assessments, launch criteria, playbooks, escalation paths, and compliance controls.

• Monitor evolving privacy and AI regulations, conduct gap assessments, and translate new requirements into prioritized product and operational improvements.

• Lead cross-functional privacy initiatives involving data mapping, permitted data uses, data retention and deletion, and tracking technologies.

• Collaborate with Security on incident response and the privacy aspects of compliance assessments and due diligence reviews.

• Establish AI governance practices for customer-facing AI agents and internal AI applications, covering data sourcing and usage rights, model fine-tuning and evaluation, third-party model terms, output ownership, and safeguards against inaccurate outputs.

• Advise on AI agent permissions, customer configurations, disclosures, human oversight, escalation mechanisms, auditability, and the allocation of responsibilities among the organization, model providers, integration partners, and customers.

• Support healthcare product development by advising on HIPAA privacy and security requirements, business associate agreements, sensitive health data, electronic medical record integrations, access controls, and patient communications.

• Counsel on automotive and home services workflows, including CRM and dealer management integrations, lead sourcing and re-engagement, appointment booking, service scheduling, and representations concerning pricing, financing, and services.

• Assess sector-specific requirements, including the Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), payments regulations, and other applicable obligations based on product features and data use.

• Advise on voice, messaging, and marketing compliance, including the Telephone Consumer Protection Act (TCPA), telemarketing and do-not-call rules, consent and opt-out mechanisms, call recording and transcription, and AI-generated voice.

• Review product claims and customer-facing guidance to ensure accurate representations of product capabilities, limitations, and customer responsibilities.

• Provide legal guidance on payments and fintech products, including consumer disclosures, fraud, chargebacks, financial services requirements, and payment network rules.

• Partner with Product and Finance to clarify and allocate compliance responsibilities among the organization, customers, and financial partners.

• Use AI tools thoughtfully in legal work to improve efficiency and quality while verifying outputs and protecting confidential information.

Requirements:

The ideal candidate is a seasoned technology lawyer with substantial in-house experience, strong privacy credentials, and the ability to translate complex legal issues into practical guidance that supports responsible product innovation.

• Juris Doctor (J.D.) degree, strong academic credentials, and a demonstrated record of legal success.

• Membership in a relevant state bar or eligibility to register as Registered In-House Counsel.

• At least 8 years of legal experience, including a minimum of 5 years in an in-house role, preferably within a high-growth technology company.

• Experience advising product teams on compliance with regulatory frameworks applicable to U.S. and global telecommunications.

• Familiarity with regulations affecting other industries and markets, particularly healthcare, automotive, and home services.

• Experience advising on risk mitigation for technology platforms, especially AI, payments, messaging, and telecommunications products.

• A recognized privacy certification, such as CIPP/US, CIPP/E, CIPM, or CIPT.

• Strong knowledge of privacy and data protection laws, including CCPA, CPRA, GDPR, TCPA, and other applicable U.S. state and federal privacy, data security, and international data protection requirements.

• Ability to identify emerging legal issues, think strategically, and develop sustainable, long-term solutions.

• Proven ability to manage multiple assignments simultaneously and lead complex projects through successful completion.

• Excellent written and verbal communication skills, with a strong customer-focused approach.

• Strong interpersonal, presentation, and facilitation skills, with the ability to collaborate effectively across teams and navigate complex corporate environments.

• Demonstrated ability to use AI tools responsibly in legal work, validate their outputs, safeguard confidential information, and improve the speed and quality of legal advice.

Benefits:

• Comprehensive healthcare: Medical, dental, and vision benefits.

• Insurance coverage: Life insurance and short- and long-term disability coverage.

• Paid parental leave: Support for employees and their families.

• Fertility benefits: Access to fertility-related support.

• Generous time off: Generous vacation allowance and three four-day summer holiday weekends.

• Retirement savings: Access to a 401(k) plan.

• Company culture: An open and transparent working environment.

• Company merchandise: Two annual merchandise and apparel distributions.

• Fitness facilities: Access to an on-site headquarters gym in Utah, with professional coaches and fitness classes.

• Childcare support: An on-site childcare center at the Utah headquarters, subsidized for employees.