Privacy Counsel

Digital Turbine•Austin, NY

1d•Hybrid

About The Position

The Privacy Counsel is a high-visibility, hands-on role within DT’s Legal team, serving as the primary privacy point of contact for a fast-moving, technical organization. The role advises on global privacy and data protection matters across DT’s platform, products, and partner ecosystem, from everyday compliance questions to new product launches and commercial transactions. It works closely with Legal, Product, Engineering, Partnerships, Ad Operations, Security, and other teams to integrate privacy considerations into product development and business decisions. The Privacy Counsel advises on applicable privacy laws and product privacy-by-design, including data flows, identifiers, consent and opt-out signaling, data minimization, retention, pseudonymization, and purpose limitation. The role also advises on privacy roles and responsibilities, negotiates privacy terms in agreements, maintains privacy documentation and templates, and tracks evolving laws and regulatory guidance. The position supports DT’s privacy compliance program and risk management work, including privacy notices, data inventories, records of processing, vendor management, impact assessments, training, breach response, regulatory inquiries, audits, and consumer and data subject rights requests. It develops scalable review processes and practical guidance for business and technical stakeholders, and works with outside counsel on complex or jurisdiction-specific matters as needed.

Requirements

At least 4 years of experience practicing privacy and data protection law, in-house or at a law firm.
Hands-on experience negotiating data processing agreements and advising on controller/processor and business/service provider allocation.
Strong working knowledge of global privacy frameworks, including CCPA/CPRA and other U.S. state privacy laws, COPPA and children’s privacy requirements, GDPR, the ePrivacy Directive, and other applicable U.S. and international data protection laws.
Ability to work directly with engineers and product teams to understand data collection and use.
Ability to translate complex legal requirements into clear, practical, actionable guidance for non-legal, technical, and business stakeholders.
Strong written and verbal communication skills, attention to detail, and ability to produce clear, usable work for busy stakeholders.
Ability to operate in a fast-paced, matrixed environment, manage multiple workstreams and shifting priorities, and work independently.
J.D. and active bar membership in good standing in any U.S. state, or eligibility for registered in-house counsel status in the state of employment.
CIPP/E, CIPP/US, or comparable privacy certification.

Nice To Haves

Exposure to the technology, ad-tech, online, or mobile ecosystem.
Familiarity with the mobile app ecosystem and ad-tech industry frameworks such as IAB TCF and GPP, as well as platform policies.
Experience building or scaling a privacy compliance program from the ground up.
Familiarity with age assurance, AI governance (including the EU AI Act and U.S. state AI laws), and state-specific children’s privacy laws.
Experience supporting large telecommunication companies.
Experience supporting a multi-party data supply chain.
Experience handling regulatory investigations or inquiries from data protection authorities such as the FTC, CPPA, ICO, or CNIL.
Familiarity with privacy and data protection laws in other markets, such as Brazil, Japan, South Korea, and India.

Responsibilities

Serve as day-to-day legal advisor on global privacy and data protection laws applicable to DT’s business, including U.S. state privacy laws, GDPR, UK GDPR, and the ePrivacy Directive.
Advise Product and Engineering on privacy-by-design considerations for features, identifiers, and data flows, including data minimization, consent and opt-out signaling, pseudonymization and de-identification, retention, and purpose limitation.
Advise on privacy roles and responsibilities across DT products and partnerships, and maintain data-flow documentation supporting DT’s positions in commercial negotiations.
Review, negotiate, and advise on data processing agreements, international data transfer mechanisms, vendor contracts, and partner agreements from a privacy perspective; maintain DPA templates and negotiation positions.
Track and interpret privacy laws, regulatory enforcement, and guidance, and translate them into practical internal guidance.
Support and mature DT’s privacy compliance program, including policies, data inventories, records of processing, retention and de-identification standards, vendor and sub-processor management, privacy impact assessments, and training materials.
Own and maintain DT’s privacy notices and external privacy disclosures.
Partner with Security and Engineering on data breach response protocols and incident management, including legal and contractual notification analysis.
Monitor and respond to regulatory inquiries, audits, partner and customer privacy questionnaires and audits, and consumer and data subject rights requests, including opt-out and Global Privacy Control signals.
Build scalable privacy review processes and playbooks that keep pace with product and commercial activity.
Advise Product, Partnerships, Sales, and Ad Operations on privacy risks and actionable product and deal decisions, escalating matters when appropriate.
Prepare clear, business-friendly privacy materials and guidance for non-legal stakeholders.
Collaborate with outside counsel on complex or jurisdiction-specific matters while managing costs and retaining institutional knowledge in-house.