SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Hilbert is a data science-first growth engine that provides B2C teams with predictive insights into user behavior and revenue drivers. The company serves Fortune 10 enterprises and well-known brands like FreshDirect, Blank Street, and Levain Bakery, offering agentic AI systems that compress decision cycles from months to minutes.
As Privacy & Product Counsel, you will be Hilbert's first dedicated privacy hire, embedded within product and engineering to build the privacy program from inception rather than retrofitting compliance. You'll operate at the intersection of privacy law, product design, and enterprise sales, serving as the primary legal voice for how the platform handles consumer data across dozens of enterprise environments.
Key responsibilities include designing and running Hilbert's end-to-end privacy program covering US, UK, and EU jurisdictions—including policies, data mapping, retention schedules, and vendor management. You'll advise product and engineering on privacy-by-design for agentic workflows, determining what data agents can access, retain, infer, or act upon. You'll own compliance across CCPA/CPRA, the US state privacy patchwork, UK GDPR/DPA 2018, and EU GDPR, while tracking emerging AI-specific regulations.
On the commercial side, you'll review and negotiate enterprise customer contracts, data processing agreements, and security addenda across US and UK/EU counterparties. You'll advise product on feature launches, marketing claims, and disclosure requirements—identifying where human-in-the-loop checkpoints are legally or strategically necessary. You'll partner with security on incident response and breach notification obligations, and serve as the primary contact for enterprise customers' legal and security teams.
The ideal candidate has 6–7 years of post-qualification experience split between in-house roles at data-intensive or AI companies and enterprise contract negotiation. You're genuinely fluent across US, UK, and EU privacy regimes, think like a product person, and have directly negotiated enterprise DPAs and cross-border transfer mechanisms. You're a true generalist comfortable with ambiguity, communicate with clarity and conviction, take full ownership, and move at startup speed without requiring formal legal-ops processes.
