Y Combinator Legal Counsel Privacy
Posted Updated 3
views
You will own privacy and data-protection compliance for Orion globally. You will advise Product and Engineering, lead data-subject rights processes, create privacy-program artifacts, review processing agreements, design cross-border transfer mechanisms, and provide guidance on privacy risk.
Responsibilities
- Determine whether Orion can launch in new jurisdictions
- Conduct privacy analyses, DPIAs, and transfer assessments
- Embed privacy-by-design into Orion's development lifecycle
- Advise Engineering on data flows and retention
- Lead and respond to data-subject rights requests
- Build records of processing, DPIA templates, and breach-response playbooks
- Review and finalize data processing agreements
- Design cross-border data-transfer mechanisms
- Create a self-service privacy-review intake
- Advise leadership on privacy risk
Requirements
- 4+ years of privacy and data-protection legal experience
- Hands-on experience applying GDPR and US state privacy laws to a technology product
- Active US bar admission
- JD from an ABA-accredited law school
- Experience using AI tools in daily legal workflows
- Experience counseling Product and Engineering teams on privacy-by-design, DPIAs, and data flows
- Familiarity with SCCs, transfer impact assessments, and adequacy analysis