Regulatory & Compliance Counsel

Legal
Regulatory & Compliance Counsel
IL, Netanya (Hybrid)
Description

We're looking for a proactive and experienced Regulatory & Compliance Counsel to join our legal team and take full ownership of global privacy , AI regulations & Compliance.

You'll be responsible for navigating the complex regulatory landscape and ensuring Bright Data stays ahead of evolving legal requirements.

Responsibilities

Global Privacy & Data Protection:

Drive and manage compliance with global data protection laws (e.g., GDPR, CCPA, LGPD, HIPAA, PIPEDA).
Lead the conduct of Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new products and business initiatives.
Draft, review, and negotiate Data Processing Agreements (DPAs) and privacy-related clauses in commercial contracts.
Manage data subject access requests (DSARs) and support incident response procedures.

Data Scraping & Web Data Compliance:

Provide strategic legal guidance to R&D and Product teams on compliant data collection practices, ensuring adherence to the CFAA, EU Database Directive, and evolving IP/TOS standards.
Conduct legal risk assessments of new data collection methodologies, focusing on risks related to AI training datasets and third-party data usage.
Draft, review, and negotiate terms of service, API agreements, and data usage policies.

AI Regulations & Ethical Governance:

Ensure compliance with emerging AI regulations and guidelines (e.g., EU AI Act, U.S. AI Executive Order, OECD AI Principles).
Support the GC in building and operationalizing AI governance frameworks, including conducting risk assessments on AI models and monitoring for ethical issues like bias and transparency.

Export Controls & Sanctions:

Maintain and manage the company's compliance program for global export control laws (e.g., U.S. EAR, ITAR, EU Dual-Use Regulation).
Execute and oversee the sanctions screening program for transactions and third-party business partners against global lists (e.g., OFAC, EU, UK Sanctions).

Requirements
3-5 years of experience as a legal counsel with specialization in privacy, compliance, and regulatory law
Background from a large law firm - a plus
Licensed attorney with active bar membership
Self-starter with strong initiative - able to drive projects independently