Senior Privacy and AI Counsel

📋 Description

• • Assist in drafting, reviewing, and negotiating Data Processing Agreements with customers, subprocessors, service providers, and third-parties.
• • Help develop, maintain, and scale global privacy programs, including preparing Data Protection Impact Assessments and maintaining Records of Processing in compliance with regulatory requirements.
• • Collaborate cross-functionally with product and engineering teams to evaluate the impact of privacy and data protection laws on product development and AI-driven features.
• • Monitor and respond to evolving privacy laws and regulations globally, with specific focus on AI-related regulatory frameworks.
• • Support implementation and ongoing compliance with AI-specific regulations, including the CCPA governance framework and related guidance.
• • Assist in classifying AI systems, assessing risk obligations, and developing internal AI governance controls, documentation, and processes.
• • Partner with legal, product, and compliance stakeholders to operationalize AI principles such as transparency, accountability, and human oversight.
• • Work directly with the Head of Privacy to promote and sustain a culture of privacy and security across the organization.
• • Advise commercial, sales, and Go-To-Market teams on privacy and data protection obligations in customer-facing agreements and business practices.
• • Partner closely with the security function to safeguard data integrity and ensure alignment between privacy and security protocols.
• • Provide legal guidance on global compliance frameworks, including U.S. and E.U. data protection laws, and their application to Harvey’s enterprise-grade AI platform.
• • Maintain up-to-date knowledge of regulatory developments in privacy and AI to proactively mitigate legal and operational risks.
• • Represent Harvey in external and internal privacy-related matters with confidence, precision, and strategic awareness.
• • Ensure all business practices adhere to applicable privacy laws and regulatory guidance across 60+ countries where Harvey operates.
• • Translate complex legal and regulatory requirements into actionable policies and procedures for non-legal teams.
• • Contribute to the development of internal training and awareness materials on privacy and AI compliance for employees.
• • Maintain accurate documentation of privacy-related decisions, risk assessments, and compliance activities for audit and regulatory purposes.
• • Balance strategic, long-term privacy governance with urgent, hands-on execution in a fast-scaling, high-growth environment.
• • Engage with global legal colleagues to align on cross-border privacy strategies and harmonize compliance approaches.
• • Operate with intensity and ownership, from early-stage product design to long-term regulatory outcomes.
• • Stay close to engineering and product teams to embed privacy-by-design principles into AI system development.
• • Respond promptly to emerging privacy risks and regulatory inquiries with accuracy and urgency.