About the job
Our Mission
At Reflection AI, our mission is to create open superintelligence that is accessible to everyone. We are pioneering open weight models designed for individuals, organizations, and even nations. Our diverse team comprises former experts from DeepMind, OpenAI, Google Brain, Meta, Character. AI, Anthropic, and more.
Role Overview:
We are on the lookout for a dedicated Privacy Compliance Counsel to establish and lead our global privacy framework. This role transcends traditional compliance; you will be at the cutting edge of AI law, translating intricate global regulations into tangible product strategies. As a strategic partner, you will collaborate with cross-functional teams in our rapidly expanding AI lab, ensuring our innovative open foundation models are built with a robust 'privacy-by-design' approach.
You will work in close partnership with our product, research, engineering, and safety teams, as well as other operational units, to develop and execute a comprehensive global privacy program that balances innovation with responsible data practices.
What You’ll Do:
Privacy Program Architecture & Management
Design and oversee a global privacy program that complies with GDPR, CCPA/CPRA, and emerging AI regulations (such as the EU AI Act).
Manage the lifecycle of compliance initiatives, including data mapping, Records of Processing Activities (RoPA), and Data Protection Impact Assessments (DPIAs).
Draft and maintain both internal and external privacy policies, such as Privacy Notices, Data Retention policies, and Employee Privacy Handbooks.
Product Counseling & Strategic Guidance
Serve as the primary legal advisor for product and engineering teams, providing timely guidance on data ingestion, model training, and feature launches.
Guide on the intersection of privacy law and AI ethics, advising on bias mitigation, data provenance, and the legal aspects of synthetic data.
Oversee privacy considerations in vendor relationships, including drafting and negotiating Data Processing Agreements (DPAs).
Operational Response & Rights Management
Create and implement tools for automating privacy-related operational responses.
