Privacy & Product Counsel
Role Summary
Join Hilberts as a Privacy & Product Counsel in London, driving their privacy program within a fast-paced, data-driven environment.
About the Organisation
Hilbert is a scalable, data science-first growth engine that gives B2C teams predictive clarity into user behavior, revenue drivers, and the actions that drive sustainable growth. Fully agentic by design, Hilbert shrinks months-long decision cycles to minutes.
From Fortune 10 enterprises to beloved brands like FreshDirect, Blank Street, and Levain Bakery, operators run their growth on Hilbert. We're also co-building alongside leading AI companies.
We're looking for a Privacy & Product Counsel who can build Hilbert's privacy program from the inside of the product - not bolt one on after the fact - who is fluent across US, UK, and European privacy law, and who can move at the speed our engineering and GTM teams already move at, with the ownership and urgency of a startup culture.
You'll be the first dedicated privacy hire, embedded with product and engineering as we design agentic systems that touch consumer data across dozens of enterprise environments and the person our biggest customers' legal and security teams call when they want to understand how our AI actually handles their data - wherever they're based. You'll also be the generalist backstop for whatever legal question lands on the desk that week.
Key Responsibilities
Privacy Program
Product & Commercial Counsel
- Design, build, and run Hilbert's privacy program - policies, data mapping, retention, and vendor/subprocessor management - from the ground up, covering both US and UK/EU entities and data flows
- Advise product and engineering on privacy-by-design for agentic workflows: what data an agent can access, retain, infer, or act on, and how that's documented and defensible under whichever regime applies
- Own compliance posture across CCPA/CPRA and the US state privacy patchwork, UK GDPR/DPA 2018, and EU GDPR, and track how state, federal, UK, and EU AI-specific rules are developing
- Build and maintain data processing agreements, international data transfer mechanisms (SCCs, UK IDTA/Addendum), and subprocessor frameworks that scale across enterprise customers without a bespoke redline every time
- Review and negotiate enterprise customer contracts, DPAs, and security addenda across US and UK/EU counterparties, working closely with sales to keep deals moving without compromising the company's data commitments
- Advise product on how new agentic features get built, marketed, and disclosed — including where an AI decision needs a human-in-the-loop checkpoint for legal or trust reasons
- Partner with security on incident response, breach notification obligations, and customer-facing security representations across jurisdictions
- Be the primary point of contact for enterprise customers' legal, security, and procurement teams when they ask how Hilbert's AI handles their data
Eligibility Criteria
The eligibility for this position is unclear as there are no explicit statements regarding visa sponsorship or applicant restrictions.
⚠️ Disclaimer: PathwayAI Africa does not guarantee employment, scholarships, visas, or admission. Always verify all opportunities through official sources before submitting personal information.
Check if You Qualify
Upload your CV to compare it against this specific opportunity. You can still apply even if improvements are recommended.