• Advise on compliance with U.S. and international privacy laws such as the CCPA/CPRA, GLBA, FCRA, CAN-SPAM, TCPA, and other state and federal privacy regulations. • Serve as subject matter expert on financial privacy laws including GLBA, Reg P, and applicable SEC and CFPB guidance for financial services or fintech-related operations. • Partner with product, engineering, and marketing teams to ensure privacy-by-design principles are embedded into products and services. • Help design, implement, and maintain privacy policies, internal protocols, and training initiatives across the organization. • Draft and negotiate data protection agreements (DPAs), vendor agreements, and terms involving data sharing, retention, and security obligations. • Provide legal counsel on data breach and incident response activities, including notification obligations and coordination with regulators. • Stay abreast of developments in U.S. privacy law and proactively assess their impact on the business. Recommend changes to mitigate legal and reputational risk. • Educate internal teams on legal risks and best practices in marketing and brand strategy.