SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 169,000 - 214,000 / annual
Dialpad is an AI platform for customer experience that resolves customer problems in real time across voice and digital channels. The company's AI agents learn from human agents and improve with every interaction, helping organizations understand customers, deliver better experiences, and increase operational efficiencies. Dialpad is backed by Andreessen Horowitz, GV, ICONIQ Capital, and T-Mobile, and serves market-leading brands including Netflix, Motorola Solutions, Randstad, and major sports organizations.
As Corporate Counsel, Product & Privacy, you will serve as a trusted, largely independent legal advisor on how Dialpad's AI-powered products intersect with privacy, security, customer protection, and regulatory obligations. You will work closely with Product, Engineering, Security, Marketing, Sales, and Customer Success to embed legal judgment directly into product design, launch, and scaling. This role reports to the Deputy General Counsel and is based in the San Francisco office (preferred).
Key responsibilities include:
• AI Governance & Product Counseling: Advise Product and Engineering on privacy-by-design and AI governance across the product lifecycle. Build and maintain legal frameworks covering AI training data, LLM data use, model governance, and compliance with the EU AI Act, US state AI laws, and FTC guidance.
• Global Privacy & Data Protection: Support Dialpad's global privacy program (GDPR/UK GDPR, CCPA/CPRA, HIPAA, and biometric privacy laws including BIPA and state voice/voiceprint statutes). Own day-to-day administration of the data subject access request program, maintain DPIAs and RoPAs, support cross-border transfer mechanisms (SCCs, UK IDTA, EU-US DPF), and serve as on-call counsel for data incidents, including breach response and required notifications.
• Telecom & Regulatory Coordination: Partner with Dialpad's Telecommunications & Regulatory Counsel on call-recording and consent issues intersecting with product features (transcription, AI notetaking, real-time coaching) and on CIPA/wiretap-adjacent product questions. Stay conversant in FCC/TCPA/911/USF fundamentals to spot issues early and route them appropriately.
• Security Partnerships & Certifications: Partner with Security and GRC on certifications (ISO 27001, SOC 2, PCI, HIPAA) and help design privacy-enhancing controls, including automated redaction, anonymization, and access governance.
• Commercial & Marketing Enablement: Support DPA and BAA negotiations, advise Sales on privacy- and product-related contract terms, and counsel Marketing on TCPA, CIPA, web tracking, consent signals, and digital advertising compliance.
• IP & Legal Operations: Participate in the Patent Review Board, support litigation holds and records-retention practices, contribute to internal policies, and help build resources that turn complex regulations into practical guidance for the business.
You will join a collaborative legal team alongside dedicated product, privacy, and telecom legal resources, supported by a strong network of outside counsel and cross-functional partners.
REQUIREMENTS:
• J.D. from an ABA-accredited law school; license in good standing to practice law in at least one U.S. state.
• 5–8 years of substantive privacy, product-counseling, and regulatory experience, ideally including time at a law firm with a technology or privacy practice plus in-house experience at a SaaS or technology company.
• Working knowledge of GDPR, CCPA/CPRA, and HIPAA, including privacy-by-design principles and cross-border data transfer mechanisms.
• Familiarity with AI legal frameworks (EU AI Act, US state AI legislation, FTC priorities) and demonstrated interest in developing deeper expertise as the landscape evolves.
• Experience advising Product and Engineering teams directly, including translating complex legal requirements into clear, actionable guidance for non-legal audiences.
• Some exposure to FCC/TCPA/VoIP regulation, call recording, or telecom/voice-AI compliance is a plus, though this role is not expected to own telecom regulatory strategy.
• Experience supporting incident response and breach notification under U.S. state laws and/or GDPR.
• CIPP/US, CIPP/E, or equivalent privacy certification is a plus.
