Principal Counsel, Privacy

About this role

What the Role Is

Babylist is hiring a Senior In-house Privacy Attorney to own and lead our privacy legal program. Reporting to the Senior Principal Counsel, you'll be the primary legal owner across U.S. state privacy compliance, our ads stack, product-embedded privacy, and AI governance. This is a strategic role — you'll be a direct partner to Product, Engineering, Data, and our Ads business, not a support function.

Who You Are

• 12+ years of overall professional working experience, with at least 3 years at a reputable law firm and 5+ years in-house at a high-growth technology company directly advising senior leadership on privacy, data, and regulatory matters

• Deep expertise in U.S. privacy laws, including CCPA/CPRA, and working familiarity with emerging state privacy health frameworks

• Hands-on experience with adtech data flows — targeting, measurement, DSPs/SSPs, clean rooms, signal loss, and consent requirements in the programmatic ecosystem

• Demonstrated experience building or scaling a privacy program — operationalizing policies, establishing privacy review workflows, managing data subject rights processes, and coordinating cross-functionally with Product, Engineering, and Security

• Ability to build tools with AI that monitor, manage, and report on compliance

• Strong business acumen — you translate legal and regulatory risk into clear, prioritized, actionable options aligned with company objectives; comfortable advising executives on tradeoffs

• Exceptional communicator — equally fluent in technical and business contexts; comfortable engaging everyone from senior executives to engineers

• Proven ability to lead initiatives, influence without authority, and operate with autonomy in a high-growth environment

• Bachelor's degree and J.D. from an ABA-accredited law school (or foreign equivalent); active membership in good standing in a U.S. State Bar

• You naturally reach for AI in your work — at Babylist, every team uses AI daily. You're already using it to move faster and improve your output, and you stay curious about what's coming next

How You Will Make An Impact

• Own and evolve Babylist's privacy legal program — U.S. state privacy laws, adtech and data monetization, product-embedded privacy compliance, and AI governance

• Build and maintain the legal review process for the product lifecycle (PRDs, experiments, launch reviews) to embed privacy-by-design from the start

• Lead privacy compliance for our ads stack — data use agreements, signal measurement, identity resolution, and clean room arrangements with partners

• Draft and negotiate DPAs, data sharing agreements, and consent framework documentation; build scalable templates and a maintained clause library

• Partner with Engineering and Product on DSAR workflows, consent management, data mapping, and data minimization

• Advise on sensitive and health-adjacent data categories arising from Babylist Health and related offerings

• Monitor the U.S. privacy regulatory landscape; brief leadership and drive policy updates and training across GTM, Product, and Ops

• Manage outside privacy counsel efficiently — own the engagement strategy, not just the relationship

About Compensation

We use a market-based approach to compensation. The starting salary range for this role is:

$229,412 - $275,311 + target 20 % annual bonus and competitive equity

Your starting salary will be based on your location, experience, and qualifications, with increases over time tied to performance, role growth, and internal pay equity.

Who We Are

Babylist is the leading platform for expecting and new families. More than 10 million people shop with Babylist every year, making it the go-to destination for seamless purchasing, guidance, and expert…