Privacy Counsel

At Digital Turbine, we make mobile advertising experiences more meaningful and rewarding for users, app publishers, and advertisers — intelligently connecting people in more ways, across more devices. We provide app publishers and advertisers with powerful ads and experiences that captivate consumers, fuel performance, and help telecoms and OEMs supercharge awareness, acquisition, and monetization. In a rapidly evolving industry, we are constantly innovating and creating better paths of discovery to connect consumers, publishers, and advertisers across the mobile ecosystem.

Please note that Digital Turbine is a hybrid work environment-only candidates local to the posting location will be considered.

DT (Digital Turbine) sits at the intersection of mobile app distribution, device monetization, and the programmatic advertising ecosystem — a position that requires us to navigate one of the most dynamic privacy and data protection landscapes in the industry. The Privacy Counsel is the person who helps us do that with rigor and speed.

This Privacy Counsel role is a high-visibility, high-impact position within the Legal team. You will serve as a hands-on advisor on global privacy and data protection matters across DT's platform, product, and partner ecosystem — advising on everything from day-to-day compliance questions to the privacy implications of new product launches and commercial deals.

You will work closely with the Legal, Product, Engineering, Partnerships, and Ad Operations teams to embed privacy considerations into how DT builds and ships products. This is a hands-on role for an experienced attorney who can move fluidly between detailed legal analysis and practical, business-friendly guidance, and who is comfortable being the primary privacy point of contact for a fast-moving, technical organization.

About the Privacy Counsel role:

Privacy & Data Protection Advisory

Serve as day-to-day legal advisor on global privacy and data protection laws applicable to DT's business, including CCPA/CPRA and other U.S. state privacy laws, GDPR,  UK GDPR, and the ePrivacy Directive. Knowledge of other countries privacy laws is an advantage. 

Advise Product and Engineering teams on privacy-by-design considerations for new features, identifiers, and data flows, including data minimization, consent and opt-out signaling, pseudonymization and de-identification standards, retention, and purpose limitation.

Advise on the allocation of privacy roles and responsibilities (e.g., controller/processor, business/service provider) across DT's products and partnerships, and maintain the data-flow documentation that supports DT's positions in commercial negotiations.

Review, negotiate, and advise on data processing agreements, international data transfer mechanisms (e.g., SCCs and the UK IDTA), vendor contracts, and partner agreements from a privacy and data protection perspective, and maintain DT's DPA templates and negotiation positions.

Track and interpret evolving privacy laws and regulatory enforcement and guidance (e.g., FTC, CPPA, and EU/UK data protection authorities) globally, and translate them into practical guidance for internal stakeholders.

Compliance Programs & Risk Management

Support and help mature DT's privacy compliance program, including policies, data inventories and records of processing, data retention and de-identification standards, vendor and sub-processor management, privacy impact assessments, and training materials.

Own and maintain DT's privacy notices and external privacy disclosures.

Partner with Security and Engineering teams on data breach response protocols and incident management, including notification analysis under applicable laws and contractual commitments.

Monitor and respond to regulatory inquiries, audits, partner and customer privacy questionnaires and audits, and consumer and data subject rights requests (including opt-out and Global Privacy Control signals) in coordination with cross-functional teams.

Help build scalable processes and playbooks so that privacy review can keep pace with DT's product and commercial velocity.

Cross-Functional Partnership

Act as an internal consultant and thought partner for Product, Partnerships, Sales, and Ad Operations teams, helping them understand privacy risk and translate it into actionable product and deal decisions, and exercising sound judgment on when a matter requires escalation to the Head of Legal or outside counsel.

Prepare clear, business-friendly materials and guidance that can be used by non-legal stakeholders without extensive legal background.

Collaborate with outside counsel on complex or jurisdiction-specific matters as needed, with an eye to cost and to keeping institutional knowledge in-house.

About YOU as the Privacy Counsel:

4+ years of experience practicing privacy and data protection law, in-house or at a law firm, including hands-on experience negotiating data processing agreements and advising on controller/processor and business/service provider allocation, ideally with exposure to the technology, ad tech, online and mobile ecosystem.

Strong working knowledge of global privacy frameworks, including CCPA/CPRA and other U.S. state privacy laws, COPPA and children's privacy requirements, GDPR, ePrivacy Directive, and other applicable U.S. and international data protection laws.

Comfort working directly with engineers and product teams to understand how data is actually collected and used before advising.

Demonstrated ability to translate complex legal requirements into clear, practical, and actionable guidance for non-legal, technical, and business stakeholders.

Strong written and verbal communication skills, with close attention to detail and the ability to produce work that is sharp, clear, and immediately usable by busy stakeholders.

Comfort operating in a fast-paced, matrixed environment, managing multiple workstreams and shifting priorities independently.

J.D. and active bar membership in good standing in any U.S. state (or eligibility for registered in-house counsel status in the state of employment).

CIPP/E, CIPP/US, or comparable privacy certification.

Preferred experience/skills:

• Familiarity with the mobile app ecosystem, and the ad-tech industry.
• Familiarity with the ad-tech industry frameworks (e.g., IAB TCF and GPP) and platform policies is an advantage.
• Experience building or scaling a privacy compliance program from the ground up.
• Familiarity with emerging areas such as age assurance, AI governance (including the EU AI Act and U.S. state AI laws), and state-specific children's privacy laws.
• Experience supporting large telecommunication companies
• Experience supporting multi-party data supply chain.
• Experience handling regulatory investigations or inquiries from data protection authorities (such as the FTC, the CPPA, ICO, CNIL.
• Familiarity with privacy and data protection laws in other markets globally (e.g., Brazil, Japan, South Korea, India) is an advantage.

At DT, we are committed to pay transparency and equitable compensation. (For New York-based candidates). The salary range for this position is $165,000 - $192,000, and is based on experience, skills, and qualifications. In addition to competitive pay, we offer a comprehensive benefits package, including (stock options, unlimited PTO and performance based bonus). We believe in fostering an environment where employees are valued and compensated fairly for their contributions.

About Digital Turbine:

Digital Turbine (NASDAQ: APPS) powers superior mobile consumer experiences and results for the world’s leading telcos, advertisers and publishers. Our end-to-end platform uniquely simplifies the ability to supercharge awareness, acquisition and monetization — connecting our partners to more consumers, in more ways, across more devices.

The company is headquartered in Austin, Texas, with global offices in New York, Los Angeles, San Francisco, London, Berlin, Singapore, Tel Aviv, and other cities around the world, serving top agency, app developer, and advertising markets.

We are honored to have achieved numerous awards as an employer of choice, around the world, including: BuiltIn's Best Places to Work Awards in 2022, 2023 and 2024, DUNS 100 Best Places to Work in Tech for 2023 and 2024, and BDICode's 100 Best Companies to Work in 2024.

Digital Turbine is an equal opportunity employer committed to exemplifying diversity and inclusion around the world. We welcome people of different backgrounds, experiences, abilities, and perspectives. We embed diversity in our mindset, products, and teams to empower an inclusive, equitable, and culturally fluent environment. Building and continuously fostering this culture within our teams makes us better collaborators, partners, and innovators.

Digital Turbine will process the information you provide during the application process in accordance with the Digital Turbine Global Recruitment Privacy Notice.