What you'll do

Own the development, implementation, and scaling of Coinbase's global privacy program in partnership with Privacy Operations, including policy drafting, data protection agreements, and transparency reports.

Lead cross-functional privacy initiatives spanning data governance, data protection tooling, and data subject rights processes in collaboration with CX, Engineering, and international teams.

Partner with Product and Commercial Counsel to embed privacy-by-design principles into the product development and launch lifecycle, translating regulatory requirements into clear, actionable product guidance.

Drive Coinbase's response to privacy incidents, regulatory inquiries, and law enforcement demands in coordination with Security and Trust & Risk.

Shape Coinbase's external privacy narrative and engage directly with government agencies, privacy regulators, and data protection authorities across EMEA and globally.

Required Skills and Experience

• 8+ years as a practicing attorney with 5+ years of substantive privacy experience, including in-house experience at technology or financial services companies
• JD or international equivalent, with qualification as a lawyer in the UK, Ireland, or an EU jurisdiction
• Deep expertise in EU and international privacy and data protection law (GDPR, PIPEDA, LGPD, CCPA/CPRA, state data breach notification laws) with demonstrated ability to map global requirements to business practices and compliance controls
• Proven track record leading complex, cross-functional privacy programs requiring coordination across Legal, Product, Engineering, Security, and Operations
• Experience drafting and negotiating privacy policies, data protection agreements, and vendor information security terms, and responding to regulatory inquiries from data protection and consumer protection authorities
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality