Product Counsel, Data Privacy & Compliance

Imprint; San Francisco (CA); On-site; USD 200,000 - 250,000; Full time

Benefits offered by this job

Competitive compensation and equity

Fully covered healthcare

Flexible PTO

Parental leave

High-end tech equipment

Job summary

Imprint in San Francisco seeks a Product Counsel, Data & Privacy to own data, privacy, and information-security legal work for our fast-growing fintech programs.

You will advise on data sharing, privacy notices, opt-outs, FCRA and GLBA rules, and collaborate with Product, Engineering, Security and Compliance to ship compliant features.

This role offers broad ownership, cross-functional impact, and opportunities to influence how we protect customer data while enabling innovative payment solutions.

Qualifications

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar.
• 4 to 8 years in data privacy law, with demonstrated expertise in GLBA/Regulation P, FCRA, and state privacy laws including CCPA, and consumer financial regulation.
• Experience in financial services, fintech, or a high-growth startup environment.
• Working knowledge of FCRA and GLBA / Regulation P, and familiarity with state privacy laws (CCPA/CPRA and newer state regimes) and their practical application to data sharing and product.
• Experience advising on data-sharing arrangements, privacy notices and opt-outs, and data retention.
• Strong contract review skills, including data sharing agreements, DPAs, and regulatory-facing documentation.
• Comfort partnering with security and information-security teams on vendor risk assessments, data protection, and incident response.
• Demonstrated ability to work autonomously, own work end-to-end, manage competing priorities, and deliver clear legal guidance under tight timelines.
• Strong communicator who proactively updates stakeholders and builds relationships across teams, able to explain a legal risk to an engineer, a data question to an analyst, and a regulatory nuance to a business leader with equal clarity.
• Willingness to research independently and verify findings with senior team members.

Responsibilities

• Serve as the go-to legal advisor on partner data sharing: what customer, account, and application data can be shared through integrations and offline feeds, and on what legal basis, and document that guidance for the Data and business teams.
• Advise on privacy opt-outs and suppression obligations, including processing partner privacy files and honoring opt-outs across data sets and downstream third parties; maintain business-facing data-sharing and opt-out guides.
• Provide practical FCRA guidance, including permissible purpose, use and reuse of credit reports, and the sharing of application and credit-decision outcomes.
• Advise on GLBA / Regulation P and consumer privacy notices, and draft, review, and maintain privacy notices and cardholder information-sharing notices.
• Interpret state privacy laws (CCPA/CPRA and emerging state regimes) and automated-decision-making / AI requirements, and advise on their impact on data use, credit scoring, and product design.
• Own data retention and deletion guidance: mapping regulatory retention obligations and destruction requirements and supporting the record-retention policy.
• Partner with Security and GRC on partner and vendor information-security risk assessments, testing constraints, and incident response (including forensics, chain of custody, and breach/authority notification).
• Provide product counseling to Product and Engineering on new features and builds that affect data sharing, privacy, or the customer experience, and draft the consents and data-related terms they need.
• Coordinate with Compliance on regulatory interpretation, monitoring, and exam preparation, and support the Associate General Counsel on escalated complaints, regulatory inquiries, and bank-partner matters.
• Translate complex data, privacy, and security requirements into clear, actionable guidance for cross-functional partners.

Skills

Data privacy

FCRA/GLBA

State privacy laws

Contract review

Cross-functional comms

Autonomy

Education

J.D. from an accredited law school

Tools

Jira

Asana

Linear

Job description

Imprint in San Francisco seeks a Product Counsel, Data & Privacy to own data, privacy, and information-security legal work for our fast-growing fintech programs.

You will advise on data sharing, privacy notices, opt-outs, FCRA and GLBA rules, and collaborate with Product, Engineering, Security and Compliance to ship compliant features.

This role offers broad ownership, cross-functional impact, and opportunities to influence how we protect customer data while enabling innovative payment solutions.