The opportunity
At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community.
What you'll do
Global privacy and data protection developments are actively monitored, with: enforcement trends translated into clear, actionable guidance that business stakeholders can act on.
New products and business initiatives across e-commerce, advertising, health,: and AI-driven product lines are reviewed and counseled through privacy requirements, with compliant design embedded from the start.
Instacart's advertising business operates with clear frameworks for data use,: audience targeting, measurement, and consent, including well-governed restrictions on sensitive data in advertising contexts.
Data sharing arrangements with retail partners, advertisers, vendors, and: subsidiaries are assessed and governed, with DPA, BAA, and cross-border transfer mechanisms (SCCs, DPF) in place.
Privacy program operations are strengthened: PRAs and DPIAs are supported, intake and documentation processes run effectively, and standard guidance, templates, playbooks, and training materials make privacy requirements accessible and scalable across the organization.
J.D. from a top-tier law school; membership in at least one U.S. state bar: (California required or ability to register as in-house counsel)
What they're looking for
- + years of experience focused on privacy and data protection, at a leading law firm, in-house, or both
- Deep working knowledge of CCPA, GDPR, HIPAA, and the evolving landscape of: U.S. state privacy and health data laws
- Experience advising on adtech, data sharing, and consumer data use in a: retail, e-commerce, or platform environment
- Strong ability to translate complex legal requirements into practical,: business-oriented guidance for non-legal stakeholders
