Privacy Counsel
What you need
- J.D. from top-tier law school; bar membership (California required)
- 6+ yrs privacy and data protection experience
- Deep knowledge of CCPA, GDPR, HIPAA, state privacy laws
- Experience advising on adtech, data sharing in retail/e-commerce
- Translate legal requirements into practical business guidance
What you'll do
- Monitor global privacy developments, translate enforcement trends into guidance
- Review and counsel new products across e-commerce, advertising, health, AI for privacy compliance
- Establish frameworks for advertising data use, targeting, measurement, consent
- Assess and govern data sharing arrangements with partners, vendors, subsidiaries
- Strengthen privacy program operations: PRAs, DPIAs, intake, templates, training
We're transforming the grocery industry
At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.
Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.
Instacart is a Flex First team
There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work.
Why this role is on the menu
Instacart's global privacy program is scaling rapidly alongside the growth of its e-commerce, advertising, health, and AI-driven product lines, and the regulatory landscape is evolving faster than ever. This role exists to embed privacy into how Instacart builds and operates, ensuring product, engineering, data science, advertising, health, and business development teams have clear, practical guidance as they move quickly. Without this partnership, cross-functional teams lack the legal support needed to navigate complex data governance decisions, from adtech and retail data sharing to AI product development. A year from now, Instacart's privacy program is stronger, more scalable, and recognized as a trusted partner embedded across every part of the business.
What you'll cook up in your first year
- Global privacy and data protection developments are actively monitored, with enforcement trends translated into clear, actionable guidance that business stakeholders can act on.
- New products and business initiatives across e-commerce, advertising, health, and AI-driven product lines are reviewed and counseled through privacy requirements, with compliant design embedded from the start.
- Instacart's advertising business operates with clear frameworks for data use, audience targeting, measurement, and consent, including well-governed restrictions on sensitive data in advertising contexts.
- Data sharing arrangements with retail partners, advertisers, vendors, and subsidiaries are assessed and governed, with DPA, BAA, and cross-border transfer mechanisms (SCCs, DPF) in place.
- Privacy program operations are strengthened: PRAs and DPIAs are supported, intake and documentation processes run effectively, and standard guidance, templates, playbooks, and training materials make privacy requirements accessible and scalable across the organization.
The secret ingredients we're looking for
Must-have pantry staples (Minimum Qualifications)
- J.D. from a top-tier law school; membership in at least one U.S. state bar (California required or ability to register as in-house counsel)
- 6+ years of experience focused on privacy and data protection, at a leading law firm, in-house, or both
- Deep working knowledge of CCPA, GDPR, HIPAA, and the evolving landscape of U.S. state privacy and health data laws
- Experience advising on adtech, data sharing, and consumer data use in a retail, e-commerce, or platform environment
- Strong ability to translate complex legal requirements into practical, business-oriented guidance for non-legal stakeholders
Optional garnishes (Preferred Qualifications)
- Experience with AI governance and privacy-by-design in ML/AI product development
- Experience in AdTech
#LI-Remote
Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here.
Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here.
For US based candidates, the base pay ranges for a successful candidate are listed below.
Optimize your resume for this job
Get a match score and the keywords you're missing
About Instacart
Instacart is a grocery delivery startup that delivers in as short as an hour. It focuses on delivering groceries and home essentials, Instacart already has over 500,000 items from local stores in its catalogue. Customers can choose from a variety of local stores including Safeway, Whole Foods, Super Fresh, Harris Teeter, Shaw's, Mariano's, Jewel-Osco, Stanley's, and Costco. Customers can mix items from multiple stores into one order.
Similar Legal & Compliance roles
