Associate General Counsel, Privacy

As Associate General Counsel focused on Privacy,  you'll join Coinbase's Legal team and serve as a senior legal advisor on privacy and data protection across the company's global operations. This role sits at the intersection of product development, regulatory strategy, and data governance, advising teams on how to build privacy-forward products while navigating a rapidly evolving regulatory landscape. You'll partner with Privacy Operations, Product Counsel, Security, and Engineering to shape Coinbase's privacy program, translate complex global requirements into actionable guidance, and represent the company with regulators and government agencies in one of its most important markets.

What you'll do

• Own the development, implementation, and scaling of Coinbase's global privacy program in partnership with Privacy Operations, including policy drafting, data protection agreements, and transparency reports
• Lead cross-functional privacy initiatives spanning data governance, data protection tooling, and data subject rights processes in collaboration with CX, Engineering, and international teams
• Partner with Product and Commercial Counsel to embed privacy-by-design principles into the product development and launch lifecycle, translating regulatory requirements into clear, actionable product guidance
• Drive Coinbase's response to privacy incidents, regulatory inquiries, and law enforcement demands in coordination with Security and Trust & Risk
• Shape Coinbase's external privacy narrative and engage directly with government agencies, privacy regulators, and data protection authorities across EMEA and globally

Required Skills and Experience

• 8+ years as a practicing attorney with 5+ years of substantive privacy experience, including in-house experience at technology or financial services companies
• JD or international equivalent, with qualification as a lawyer in the UK, Ireland, or an EU jurisdiction
• Deep expertise in EU and international privacy and data protection law (GDPR, PIPEDA, LGPD, CCPA/CPRA, state data breach notification laws) with demonstrated ability to map global requirements to business practices and compliance controls
• Proven track record leading complex, cross-functional privacy programs requiring coordination across Legal, Product, Engineering, Security, and Operations
• Experience drafting and negotiating privacy policies, data protection agreements, and vendor information security terms, and responding to regulatory inquiries from data protection and consumer protection authorities
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

P77876