Product Counsel (Data & Privacy)

Join Imprint, a fast-paced startup focused on revolutionizing the credit card industry. As a Product Counsel - Data & Privacy, you will be the first-line legal resource for data-sharing and privacy questions, advising on partner data sharing, privacy opt-outs, FCRA and credit data, GLBA/Reg P, data retention, and information security. You will have direct access to senior leadership and real influence on how customer data powers our products. This role is ideal for a self-driven attorney who thrives in fast-moving environments and takes pride in owning work end-to-end.

- Act as the first-line legal resource for data-sharing and privacy questions across ongoing and launching programs, providing practical guidance on FCRA, GLBA, and state privacy laws. - Serve as the go-to legal advisor on partner data sharing, advising on what customer, account, and application data can be shared and on what legal basis. - Translate complex data, privacy, and security requirements into clear, actionable guidance for cross-functional partners, ensuring compliance with regulatory obligations.

- Experience with FCRA in a lending or credit context, ECOA/Reg B adverse action, and automated decision-making / AI governance (e.g., state ADMT laws) - Experience in sponsor bank, banking-as-a-service, or fintech partnership environments - Willingness to research independently and verify findings with senior team members - Experience in financial services, fintech, or a high-growth startup environment - Privacy certification (e.g., CIPP/US) - Working knowledge of FCRA and GLBA / Regulation P, and familiarity with state privacy laws (CCPA/CPRA and newer state regimes) and their practical application to data sharing and product - Strong contract review skills, including data sharing agreements, DPAs, and regulatory-facing documentation - 4 to 8 years in data privacy law, with demonstrated expertise in GLBA/Regulation P, FCRA, and state privacy laws including CCPA, and consumer financial regulation - Comfort partnering with security and information-security teams on vendor risk assessments, data protection, and incident response - J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar - Strong communicator who proactively updates stakeholders and builds relationships across teams, able to explain a legal risk to an engineer, a data question to an analyst, and a regulatory nuance to a business leader with equal clarity - Demonstrated ability to work autonomously, own work end-to-end, manage competing priorities, and deliver clear legal guidance under tight timelines - Experience advising on data-sharing arrangements, privacy notices and opt-outs, and data retention - Experience working in a ticketing or project management system (e.g., Linear, Jira, Asana) - Experience with GDPR applicability and ROPA obligations - Experience with consumer credit products, such as credit cards or buy-now-pay-later - Familiarity with data-security frameworks (PCI DSS, SOC 2, NIST) and breach/incident-response processes - Comfort with legal technology, AI-assisted workflows, and process automation - Familiarity with additional consumer finance regulations (TILA/Reg Z, EFTA/Reg E, UDAAP, CAN-SPAM, TCPA) and their intersection with data and product - Experience building or standardizing privacy frameworks across multiple product lines or partner programs