Sr. Counsel, Privacy Compliance
Databricks
GAQ327R249
About the Team
Databricks is at the forefront of data and AI innovation, and our Legal team plays a vital role in supporting this mission. We are dedicated to navigating complex legal landscapes and ensuring compliance within the rapidly evolving technology sector. Our team is composed of diverse legal professionals with expertise in technology, privacy, intellectual property, corporate law, cybersecurity, employment law, tax, regulatory compliance, and litigation.
About the Role
Databricks is seeking a talented and experienced Senior Counsel, Privacy to serve as a trusted advisor across the business. In this role you will own and mature our privacy program, lead legal initiatives that deliver cutting-edge, practical legal advice as we navigate rapidly evolving global privacy and AI laws. Reporting to the Director & Assistant General Counsel, Privacy, you will develop AI-enabled solutions for operating and maturing the privacy processes and controls that keep Databricks compliant.
You will be agile and highly organized, with the skills, drive, and flexibility to build and scale a program at a leading technology company, addressing cutting-edge legal issues and organizational challenges. A successful candidate will be an AI proficient builder, resourceful self-starter, comfortable working in a fast-paced and dynamic environment, and excellent at building strong relationships and driving cross-functional execution.
The impact you will have
- Legal advice and regulatory interpretation. Advise on compliance with global privacy and data protection laws (e.g., GDPR, CCPA/CPRA, ADMT, and other U.S. state laws, Monitor legal and regulatory developments, and translate them into actionable guidance for the business.
- Privacy Program & Governance Leadership: Build and mature Databricks’ privacy program to continue meeting evolving regulatory expectations, including contributions to AI governance. Develop core program components for compliance with new regulations, including data subject rights requests, privacy notices, consent management, PIA/DPIAs, and policy management.
- Risk assessments. Conduct gap analysis and risk assessments, including Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and transfer impact assessments to identify, assess, and help mitigate privacy risk, and support the organization's records of processing activities (RoPA).
- Contract Negotiation and Transactions: Draft and update form agreements, and counsel on and negotiate data protection provisions in commercial contracts, including data processing addendums (DPAs), standard contractual clauses (SCCs), and related data-transfer instruments.
- Policies, training, and governance. Develop and maintain internal privacy policies, external privacy notices, and standards. Design and deliver privacy training and awareness programs, and help operationalize privacy and AI governance frameworks and cross-functional privacy committees.
- Cross-Functional Collaboration & Legal Partnership: Build deep cross-functional relationships and collaborate with other legal leaders in commercial, go-to-market, compliance, corporate, and public affairs on privacy issues.
- Business and Legal Judgment: Exercise practical judgment about when to approve, approve with conditions, decline, or escalate.
- Team Contribution: Provide general legal support on a flexible, as-needed basis across other areas of the business, and contribute as a team player to further the legal department's reputation as an effective, respected, and valued resource within the company.
What we look for
- 7+ years of relevant legal experience at a top law firm and/or in-house (a combination of both is a plus), with 5+ years focused on privacy and demonstrated experience building, operating, or leading a privacy compliance program (not solely advisory work)
- Deep, current knowledge of global privacy and AI frameworks, including the GDPR/UK GDPR, CCPA/CPRA, EU AI Act, and the growing patchwork of U.S. state comprehensive privacy and AI laws, and familiarity with cross-border data transfer mechanisms (SCCs, IDTA, adequacy, EU-U.S. Data Privacy Framework).
- Working knowledge of the operational building blocks of a privacy program — DPIAs/PIAs, ROPA and data mapping, data subject rights processes, privacy by design, and vendor/third-party risk management
- Technical proficiency in using AI tools to build skills, agents, and other automated tasks.
- Capacity to be a generalist and learn new areas of law and legal skills quickly as the business evolves
- Deep understanding of cloud and software technology, and a strong desire to work on legal issues in these areas
- Experience working for a company offering platform services to business customers is a plus
- Familiarity with privacy management tooling (e.g., OneTrust or comparable) is a plus
- J.D. from a top-tier law school
- State bar membership required, in good standing
- One or more privacy certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, FIP) preferred; CIPM is particularly valued for a program-leadership role
What you bring
- You can set the direction for a program and drive it into execution — prioritizing and managing time and client expectations amid competing demands, often without direct guidance, as we scale our rapidly expanding business.
- You exercise good judgment in raising issues, assessing risk, and providing concise, actionable, business-focused legal advice and counsel.
- You build strong, deep working relationships with internal stakeholders across multiple geographies and functions, and are comfortable working with distributed teams.
- You are a self-starter who operates independently and interacts confidently with senior management, influencing without authority.
- You have a strong work ethic, excellent organizational skills, and the ability to manage many cross-functional projects simultaneously with minimal supervision.
- You have outstanding written and verbal communication skills and can make complex privacy and regulatory concepts clear to both legal and non-legal audiences, including executives.
Pay Range Transparency
Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.
Pay Range Transparency
Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.
About Databricks
Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.
Benefits
At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.
Our Commitment to Diversity and Inclusion
At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.
Compliance
If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.
Sr. Counsel, Commercial (Healthcare & Life Sciences)
Databricks
GAQ327R248
About the Role
Databricks is looking for an experienced commercial attorney to join our Commercial Legal team, with a primary focus on supporting our Healthcare and Life Sciences (HLS) sales teams.
Our HLS customers - health systems, pharmaceutical and biotechnology companies, medical device and diagnostics companies, payers and health services companies, healthcare technology and data companies, and clinical research organizations - bring some of the most complex and interesting legal work on the commercial team. The customers on the other side of the table are sophisticated and heavily regulated, with specific compliance, privacy, and security requirements that need to be understood and addressed.
You'll work side-by-side with Sales to lead negotiations, shape deal strategy, and address the issues that matter most to regulated customers - from HIPAA and data privacy to AI terms and security requirements. The role requires strong commercial judgment, the ability to build trust with sales teams and customers alike, and a practical approach to risk. You'll also have a front-row seat to how AI is transforming legal work. Our team is actively building and using AI-powered tools for contract review, research, drafting, and knowledge management, and you'll be part of shaping what that looks like. This position reports to the Senior Director & Associate General Counsel, Commercial.
The impact you will have:
- Lead complex commercial transactions from first engagement through signature, including drafting and negotiating SaaS MSAs and related security and privacy terms, as well as order forms, statements of work, and related transaction documents
- Negotiate healthcare-specific agreements and provisions, including business associate agreements, healthcare data privacy and security terms, and regulatory compliance requirements
- Partner closely with Sales, Deal Desk, Finance, Security, Privacy, Product, and other stakeholders to resolve issues that affect deal execution
- Advise on issues that arise in enterprise technology transactions with regulated customers, including data privacy, information security, artificial intelligence, intellectual property, open source software, and healthcare-specific regulatory requirements
- Help improve templates, playbooks, fallback positions, guidance, and contracting processes - including building institutional knowledge on HLS-specific deal patterns
- Leverage AI tools to work more efficiently and contribute to the team's adoption of AI-assisted legal workflows
- Provide concise, practical legal advice that balances legal risk with commercial objectives
What we look for:
- 7+ years of relevant technology transactions experience at a law firm and/or in-house legal department
- Significant experience drafting, negotiating, and closing complex sell-side software, SaaS, and cloud transactions with enterprise customers
- Experience supporting customers in healthcare, life sciences, or other heavily regulated industries, with a working knowledge of HIPAA and experience negotiating or advising on business associate agreements and healthcare data privacy requirements
- Strong familiarity with issues that commonly arise in commercial technology deals, including data privacy, information security, intellectual property, and open source software
- Experience advising on AI-related contract terms, data use provisions, and emerging technology issues in enterprise transactions, and a demonstrated interest in using AI tools to improve the efficiency and quality of legal work
- Demonstrated ability to independently manage sophisticated negotiations, exercise sound judgment, and translate legal and business risk into practical advice
- Strong communication and prioritization skills, and the ability to manage multiple matters effectively
- Experience supporting cloud, infrastructure, platform, or other technology companies is preferred
- Juris Doctor and active bar membership in good standing in at least one U.S. jurisdiction
Pay Range Transparency
Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.
Pay Range Transparency
Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.
Pay Range Transparency
Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.
About Databricks
Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.
Benefits
At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.
Our Commitment to Diversity and Inclusion
At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.
Compliance
If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.
Data Privacy, Cybersecurity & AI Compliance Manager
Hippo Insurance
Title: Data Privacy, Cybersecurity & AI Compliance Manager
Location: Austin, TX / Dallas, TX / Morristown, NJ (Hybrid)
Reporting to: Sr. Enterprise Compliance Director
About Hippo:
Hippo was built on a promise: make homeownership effortless. Nearly a decade later, that mission still drives us. We use technology and data to help our customers stay ahead of problems and protect what matters most.
Today, that same tech-native approach powers our work beyond homeowners. Hippo operates as a diversified carrier platform, partnering with MGAs to deliver tailored program solutions that help them grow and deliver better customer experiences. Behind that work is a team that values ownership, curiosity, collaboration, and continuous improvement.
If you're energized by building what's next, we'd love to meet you.
About You:
You are a compliance professional who lives at the intersection of data privacy, cybersecurity, and AI governance. You're not necessarily an attorney, but you know how to translate complex regulatory requirements into practical, operational compliance programs, and you know when an issue needs to go to Legal for interpretation or sign-off. You've built or matured compliance programs against frameworks like the CCPA/CPRA and other state privacy laws, the TCPA and related marketing rules, the NYDFS Cybersecurity Regulation (23 NYCRR 500), the NAIC Insurance Data Security Model Law, and emerging AI regulations (e.g., Colorado AI Act, EU AI Act, NAIC AI model bulletins). You're as comfortable running day-to-day privacy operations, working a live security incident alongside InfoSec, or writing a quarterly report for a board committee as you are designing the program those activities live in. Insurance industry experience is a strong plus, since you understand the regulatory overlay carriers and producers face beyond standard corporate compliance. You're detail-oriented, comfortable managing multiple regulatory threads at once, and skilled at partnering across Legal, Security, Engineering, Marketing, and the business to keep Hippo ahead of a fast-moving regulatory landscape.
What You'll Do:
- Privacy Program Build & Ownership: Design, build, and run Hippo's enterprise data privacy compliance program, maturing it from today's operational footing into a documented, auditable program: governance and accountability structure, data inventory and records of processing, privacy impact assessment process, policy framework, program metrics, and a regulatory change management process covering CCPA/CPRA, other state privacy laws, and insurance-specific privacy requirements (e.g., GLBA and state insurance privacy laws)
- Privacy Operations & Consumer Rights: Own Hippo's privacy mailbox and consumer rights request process end to end: intake, verification, tracking, and timely response to access, deletion, correction, and opt-out requests, with documentation sufficient to withstand regulatory scrutiny
- Marketing & Advertising Compliance: Own compliance for marketing and outreach channels, including TCPA/telemarketing and SMS consent requirements (CTIA messaging standards, consent capture and logging, opt-out handling), CAN-SPAM, and website tracking technologies (cookies, pixels, session replay) and consent management; partner with Marketing and Growth teams on campaign and disclosure review
- Cybersecurity Regulatory Compliance: Support compliance with insurance-specific cybersecurity regulations (NYDFS 23 NYCRR 500, NAIC Insurance Data Security Model Law and state adoptions) and general frameworks (e.g., NIST); support annual certifications, risk assessments, and regulatory exams and audits, and maintain required documentation
- Cyber Event Handling: Partner with Information Security on the triage, investigation, containment, and resolution of cyber events; own the compliance workstream for each event, including documentation, materiality and notification analysis support (state breach statutes, NYDFS 72-hour reporting), and remediation tracking, escalating legal determinations to counsel
- AI Governance & Compliance: Build and maintain Hippo's AI compliance framework, including use case intake, risk assessment, inventory, and monitoring for AI/ML systems across the business; track state, federal, and international AI regulation relevant to insurance (algorithmic accountability, AI in underwriting, claims, and pricing, model governance requirements)
- Vendor & Third-Party Risk: Conduct privacy and data-protection reviews of vendors and third-party service providers, support the data processing agreement process with Legal, and partner with InfoSec on third-party security diligence, including NYDFS Section 500.11 TPSP requirements
- Policies, Standards & Training: Draft, maintain, and operationalize internal policies, standards, and procedures for data privacy, cybersecurity, and AI use, and develop and deliver company-wide training and awareness on those policies, in coordination with the Sr. Enterprise Compliance Director and Legal
- Regulatory Liaison Support: Serve as a day-to-day point of contact for regulatory inquiries, exams, and audits touching privacy, cyber, and AI, coordinating responses and escalating legal interpretation questions to attorney oversight
- Cross-Functional Partnership: Work closely with Legal, Information Security, Engineering, Marketing, and business units to embed privacy, security, and AI compliance requirements into products, processes, and vendor relationships
Must Haves:
- 5+ years of experience in data privacy, cybersecurity, and/or AI governance compliance within a regulated industry, including hands-on operational experience (consumer rights requests, incident response, marketing compliance), not just policy work
- Bachelor's degree; one or more relevant certifications strongly preferred: CIPP/US, CIPM, or CIPT (IAPP privacy certifications), AIGP (IAPP Artificial Intelligence Governance Professional), CISSP, CISM, CRISC, or CDPSE
- Demonstrated experience building or significantly maturing a privacy or compliance program, not solely running an established one
- Working knowledge of key privacy, marketing, and cybersecurity regulatory frameworks (CCPA/CPRA and other state privacy laws, TCPA, GLBA, NYDFS 23 NYCRR 500, NAIC Insurance Data Security Model Law)
- Familiarity with the emerging AI regulatory landscape and how it applies to insurance use cases (underwriting, claims, pricing, customer service)
- Experience supporting security incident response and breach notification analysis in partnership with information security and legal teams
- Strong written communication skills, including experience preparing reporting for senior management, board, or committee audiences
- Experienced working in close partnership with legal counsel and knows when to escalate for legal interpretation
- Strong program and project management skills; able to manage multiple regulatory workstreams simultaneously
- Technical aptitude and the ability to quickly learn new technologies and platforms (privacy management, consent management, and GRC tooling a plus)
Nice to Haves:
- Insurance industry experience strongly preferred (P&C a plus)
Benefits and Perks:
Hippo treats its team members with the same level of dedication and care as we do our customers, which is why we’re fortunate to provide all of our Hippos with:
- Healthy Hippos Benefits - Multiple medical plans to choose from and 100% employer covered dental & vision plans for our team members and their families. We also offer a 401(k)-retirement plan, short & long-term disability, employer-paid life insurance, Flexible Spending Accounts (FSA) for health and dependent care, and an Employee Assistance Program (EAP)
- Equity - This position is eligible for equity compensation
- Training and Career Growth - Training and internal career growth opportunities
- Flexible Time Off - You know when and how you should recharge
- Little Hippos Program - We offer 12 weeks of parental leave for primary and secondary caregivers
- Hippo Habitat - Snacks and drinks available and catered lunches for onsite employees
The Morristown, NJ base pay range for this role is $120,000 - $179,500. Exact compensation may vary based on several job-related factors that are unique to each candidate, including but not limited to: skill set, experience, education/training, location, business needs and market demands.
Hippo is an equal opportunity employer, and we are committed to building a team culture that celebrates diversity and inclusion. Hippo’s applicants are considered solely based on their qualifications, without regard to an applicant’s disability or need for accommodation. Any Hippo applicant who requires reasonable accommodations during the application process should contact the Hippo’s People Team to make the need for an accommodation known.
Contracts Attorney
Hippo Insurance
Title: Contracts Attorney
Location: Morristown, NJ / Dallas, TX / Austin, TX (Hybrid)
Reporting to: General Counsel
About Hippo:
Hippo was built on a promise: make homeownership effortless. Nearly a decade later, that mission still drives us. We use technology and data to help our customers stay ahead of problems and protect what matters most.
Today, that same tech-native approach powers our work beyond homeowners. Hippo operates as a diversified carrier platform, partnering with MGAs to deliver tailored program solutions that help them grow and deliver better customer experiences. Behind that work is a team that values ownership, curiosity, collaboration, and continuous improvement.
If you're energized by building what's next, we'd love to meet you.
About You:
You are an insurance professional with experience drafting, reviewing, and negotiating program agreements and reinsurance agreements. You understand the impact of market conditions on insurance activities, procedures and wordings. You are able to clearly and succinctly articulate issues to the various departments, evaluate the risks associated with the (re)insurance activities and to develop commercial risk mitigation options, while ensuring all operations are compliant with applicable regulatory requirements.
What You'll Do:
- Strategically, efficiently, and timely draft, review, and negotiate reinsurance, program administration, and claims agreements considering risk mitigation wording and trends in contract interpretation
- Create and implement processes to capture and respond to wording issues, including an escalation process
- Promptly make decisions and/or roll out decisions, after any required approvals, reflecting all available information and appropriate risk assessments
- Understand relevant business drivers, the ability to identify and raise critical issues/points when needed, and take ownership of your actions and responses
- Work autonomously, while considering feedback from underwriting peers, reinsurers, and management
- Exemplify collegiality, efficiency, proactivity and curiosity
- Have strong written and oral communication skills and an ability to work in a fast-paced environment
Must Haves:
- J.D. from an accredited law school or international equivalent
- Licensed to practice and a member in good standing/the ability to immediately reactivate membership in at least one US state
- At least 4+ years in drafting reinsurance agreements, program administration agreements, and/or related agreements
Benefits and Perks:
Hippo treats its team members with the same level of dedication and care as we do our customers, which is why we’re fortunate to provide all of our Hippos with:
- Healthy Hippos Benefits - Multiple medical plans to choose from and 100% employer covered dental & vision plans for our team members and their families. We also offer a 401(k)-retirement plan, short & long-term disability, employer-paid life insurance, Flexible Spending Accounts (FSA) for health and dependent care, and an Employee Assistance Program (EAP)
- Equity - This position is eligible for equity compensation
- Training and Career Growth - Training and internal career growth opportunities
- Flexible Time Off - You know when and how you should recharge
- Little Hippos Program - We offer 12 weeks of parental leave for primary and secondary caregivers
- Hippo Habitat - Snacks and drinks available and catered lunches for onsite employees
The Morristown, NJ base pay range for this role is $167,500 - $245,000. Exact compensation may vary based on several job-related factors that are unique to each candidate, including but not limited to: skill set, experience, education/training, location, business needs and market demands.
Hippo is an equal opportunity employer, and we are committed to building a team culture that celebrates diversity and inclusion. Hippo’s applicants are considered solely based on their qualifications, without regard to an applicant’s disability or need for accommodation. Any Hippo applicant who requires reasonable accommodations during the application process should contact the Hippo’s People Team to make the need for an accommodation known.
Staff Attorney
Company Name
Staff Attorney
Company Name
Regional Legal Counsel - Vegetable Seeds - NAJAK (NA Japan Australia and Korea)
Company Name
Legal Assistant
Company Name