Privacy Compliance Counsel

Reflection • New York, NY

1d

About The Position

Our Mission
Reflection’s mission is to build open superintelligence and make it accessible to all.
We’re developing open weight models for individuals, agents, enterprises, and even nation states. Our team of AI researchers and company builders come from DeepMind, OpenAI, Google Brain, Meta, Character.AI, Anthropic and beyond.
Role Overview:
We are seeking a Legal Privacy and Compliance Lead to develop and implement Reflection AI’s global privacy framework. This isn't just a "check-the-box" compliance role. You will work at the frontier of AI law, translating complex global regulations into actionable product roadmaps. You will be a strategic partner to cross-functional teams across a hyper-scaling AI lab, ensuring our frontier open foundation models are built with a "privacy-by-design" philosophy that scales.
You’ll work closely with our product, research, engineering and safety teams, as well as other business operations and compliance units to develop, implement and execute a comprehensive global privacy program, and build workable privacy controls that balance innovation and development with responsible data practices.

Requirements

• 7+ years of legal experience, with at least 4 years focused on privacy and data protection, to include familiarity with relevant state-level privacy laws, and international frameworks like GDPR and/or Korea’s PIPA.
• J.D. from an accredited law school and active membership in at least one U.S. State Bar.
• A strong understanding of how LLMs or machine learning models work. You don't need to code, but you must be able to speak the language of engineers.
• Experience leading cross-functional projects or managing a privacy legal function; comfort moving between "individual contributor" tasks and "project lead" responsibilities.
• Comfort working with technical systems, configs, and dashboards.

Nice To Haves

• Previous people management and/or experience building teams.
• CIPP/US, CIPP/E, and/or CIPM are highly preferred.
• Previous experience at an AI lab or model developer.
• Tactical experience building compliance frameworks under relevant state privacy laws and international regulations like the EU and UK GDPR and/or Korea’s PIPA.
• Experience at a startup or fast-moving engineering team

Responsibilities

• Design, implement, and oversee a comprehensive global privacy program that aligns with GDPR, CCPA/CPRA, and emerging AI-specific regulations (e.g., EU AI Act).
• Program manage the lifecycle of compliance initiatives, including data mapping, Records of Processing Activities (RoPA), and Data Protection Impact Assessments (DPIAs).
• Draft and maintain internal and external-facing policies, including Privacy Notices, Data Retention policies, and Employee Privacy Handbooks.
• Act as the primary legal partner for product and engineering teams, providing real-time advice on data ingestion, model training, and feature launches.
• Navigate the intersection of privacy law and AI ethics, advising on bias mitigation, data provenance, and the legal implications of synthetic data.
• Manage the privacy aspects of vendor relationships, including drafting and negotiating Data Processing Agreements (DPAs).
• Develop, execute and deploy tooling to automate processes to triage and fulfill Data Subject Access Requests (DSARs) and deletion requests.
• Act as lead legal partner for, and contribute to the policies and processes for, the Privacy Incident Response Team (PIRT), including the development of "battle cards" for data breaches and table-top exercises for company readiness.
• Monitor the global regulatory landscape to anticipate shifts in privacy laws, ensuring the company remains ahead of the curve.

Benefits

• Comprehensive medical, dental, vision, life, and disability insurance.
• Fully paid parental leave for all new parents, including adoptive and surrogate journeys.
• Financial support for family planning.
• Paid time off when you need it
• Relocation support
• Lunch and dinner are provided daily.
• Regular off-sites and team celebrations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Ph.D. or professional degree
• Number of Employees: 1-10 employees