Principal Counsel, Privacy

Who We Are Babylist is the leading platform for expecting and new families. More than 10 million people shop with Babylist every year, making it the go-to destination for seamless purchasing, guidance, and expert recommendations. As a modern, AI-forward tech company, Babylist has expanded from a universal registry into a full ecosystem — the Babylist Shop, Babylist Health, Babylist Money, NYC and LA showrooms, branded content, and more — generating $750M in revenue in 2025. Building the generational brand in baby, Babylist is reshaping the $235B kids and baby market and helping parents feel confident, connected, and cared for at every step. Our Ways of Working Babylist is remote-first with team members across the U.S. and Canada who move fast, think smart, and use AI as part of how they work every day — not as an experiment, as an expectation. We come together twice a year to build the relationships behind the work, and we hire people who are genuinely excited about what's possible and prove it through how they show up. What the Role Is Babylist is hiring a Senior In-house Privacy Attorney to own and lead our privacy legal program. Reporting to the Senior Principal Counsel, you'll be the primary legal owner across U.S. state privacy compliance, our ads stack, product-embedded privacy, and AI governance. This is a strategic role — you'll be a direct partner to Product, Engineering, Data, and our Ads business, not a support function. Who You Are 12+ years of overall professional working experience, with at least 3 years at a reputable law firm and 5+ years in-house at a high-growth technology company directly advising senior leadership on privacy, data, and regulatory matters Deep expertise in U.S. privacy laws, including CCPA/CPRA, and working familiarity with emerging state privacy health frameworks Hands-on experience with adtech data flows — targeting, measurement, DSPs/SSPs, clean rooms, signal loss, and consent requirements in the programmatic ecosystem Demonstrated experience building or scaling a privacy program — operationalizing policies, establishing privacy review workflows, managing data subject rights processes, and coordinating cross-functionally with Product, Engineering, and Security Ability to build tools with AI that monitor, manage, and report on compliance Strong business acumen — you translate legal and regulatory risk into clear, prioritized, actionable options aligned with company objectives; comfortable advising executives on tradeoffs Exceptional communicator — equally fluent in technical and business contexts; comfortable engaging everyone from senior executives to engineers Proven ability to lead initiatives, influence without authority, and operate with autonomy in a high-growth environment Bachelor's degree and J.D. from an ABA-accredited law school (or foreign equivalent); active membership in good standing in a U.S. State Bar You naturally reach for AI in your work — at Babylist, every team uses AI daily. You're already using it to move faster and improve your output, and you stay curious about what's coming next How You Will Make An Impact Own and evolve Babylist's privacy legal program — U.S. state privacy laws, adtech and data monetization, product-embedded privacy compliance, and AI governance Build and maintain the legal review process for the product lifecycle (PRDs, experiments, launch reviews) to embed privacy-by-design from the start Lead privacy compliance for our ads stack — data use agreements, signal measurement, identity resolution, and clean room arrangements with partners Draft and negotiate DPAs, data sharing agreements, and consent framework documentation; build scalable templates and a maintained clause library Partner with Engineering and Product on DSAR workflows, consent management, data mapping, and data minimization Advise on sensitive and health-adjacent data categories arising from Babylist Health and related offerings Monitor the U.S. privacy regulatory landscape; brief