Product Counsel (Data & Privacy)

Join Imprint, a fast-paced startup focused on revolutionizing the credit card industry. As a Product Counsel - Data & Privacy, you will be the first-line legal resource for data-sharing and privacy questions, advising on partner data sharing, privacy opt-outs, FCRA and credit data, GLBA/Reg P, data retention, and information security. You will have direct access to senior leadership and real influence on how customer data powers our products. This role is ideal for a self-driven attorney who thrives in fast-moving environments and takes pride in owning work end-to-end.

• Act as the first-line legal resource for data-sharing and privacy questions across ongoing and launching programs, providing practical guidance on FCRA, GLBA, and state privacy laws.
• Serve as the go-to legal advisor on partner data sharing, advising on what customer, account, and application data can be shared and on what legal basis.
• Translate complex data, privacy, and security requirements into clear, actionable guidance for cross-functional partners, ensuring compliance with regulatory obligations.

• Experience with FCRA in a lending or credit context, ECOA/Reg B adverse action, and automated decision-making / AI governance (e.g., state ADMT laws)
• Experience in sponsor bank, banking-as-a-service, or fintech partnership environments
• Willingness to research independently and verify findings with senior team members
• Experience in financial services, fintech, or a high-growth startup environment
• Privacy certification (e.g., CIPP/US)
• Working knowledge of FCRA and GLBA / Regulation P, and familiarity with state privacy laws (CCPA/CPRA and newer state regimes) and their practical application to data sharing and product
• Strong contract review skills, including data sharing agreements, DPAs, and regulatory-facing documentation
• 4 to 8 years in data privacy law, with demonstrated expertise in GLBA/Regulation P, FCRA, and state privacy laws including CCPA, and consumer financial regulation
• Comfort partnering with security and information-security teams on vendor risk assessments, data protection, and incident response
• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar
• Strong communicator who proactively updates stakeholders and builds relationships across teams, able to explain a legal risk to an engineer, a data question to an analyst, and a regulatory nuance to a business leader with equal clarity
• Demonstrated ability to work autonomously, own work end-to-end, manage competing priorities, and deliver clear legal guidance under tight timelines
• Experience advising on data-sharing arrangements, privacy notices and opt-outs, and data retention
• Experience working in a ticketing or project management system (e.g., Linear, Jira, Asana)
• Experience with GDPR applicability and ROPA obligations
• Experience with consumer credit products, such as credit cards or buy-now-pay-later
• Familiarity with data-security frameworks (PCI DSS, SOC 2, NIST) and breach/incident-response processes
• Comfort with legal technology, AI-assisted workflows, and process automation
• Familiarity with additional consumer finance regulations (TILA/Reg Z, EFTA/Reg E, UDAAP, CAN-SPAM, TCPA) and their intersection with data and product
• Experience building or standardizing privacy frameworks across multiple product lines or partner programs