Privacy & Product Counsel (AI)

Location: Remote-first from Europe or the US, with one full week in the Freiburg or San Francisco office each month; office-based options are available in Freiburg or San Francisco.

Compensation: EU €150,000–€200,000 + equity; US $200,000–$250,000 USD.

Company

Black Forest Labs is a frontier AI research lab building multimodal FLUX models for images, video, audio, action, generative media, computer use, and physical AI.

What you will do

• Advise product teams on new models, API features, and innovative products from specification through launch.
• Review launch announcements, model cards, campaign copy, analytics, partnerships, and advertising claims.
• Own the GDPR programme across training data, fine-tuning, inference, logging, and retention, including DPIAs and privacy documentation.
• Negotiate DPAs, zero-data-retention and no-training commitments, security questionnaires, and enterprise privacy terms.
• Manage EU–US transfer mechanisms, vendor and sub-processor diligence, US state privacy obligations, data subject requests, complaints, and incidents.
• Build privacy playbooks, templates, policies, training, and scalable processes for the wider organisation.

Requirements

• 5–8 years’ PQE as a qualified lawyer in an EU/EEA jurisdiction or the UK, with substantial experience in data protection and product counselling.
• Experience in a technology company, a top-tier law firm privacy or technology practice, or both; in-house product advisory experience is preferred within this background.
• Deep practical knowledge of GDPR, the German BDSG, the ePrivacy framework, and international transfer rules, plus working knowledge of relevant EU regulations including the EU AI Act.
• Familiarity with US privacy and AI law, including CCPA/CPRA, BIPA, and state AI and deepfake statutes.
• Experience advising on AI, ML, or data-intensive products, including understanding training pipelines, inference, and feature releases.
• Ability to provide direct, pragmatic advice under uncertainty and translate novel legal questions into clear product guidance.
• Strong drafting skills across DPAs, privacy notices, DPIAs, and commercial privacy terms.
• Excellent written and spoken English, with the ability to explain complex issues to researchers, executives, and regulators.
• Ownership mindset and comfort building processes in a fast-moving, high-growth environment.

Nice to have

• Experience with generative AI, computer vision, or media products, particularly biometric data, likeness rights, or synthetic media.
• Direct experience engaging with data protection authorities or the EU AI Office.
• CIPP/E, CIPT, or equivalent certification.
• German language skills.
• Interest in adjacent areas such as security and trust & safety.

Culture & Benefits

• Remote-first work from Europe or the US with one full week per month in Freiburg or San Francisco.
• Real offices in Freiburg and San Francisco support regular team connection.
• Values include deep scientific work, low ego, ambitious execution, shared credit, and kindness.
• Compensation includes equity in addition to the stated EU or US salary range.

Hiring process

• Applications may be organised with AI-assisted tools, while all hiring decisions are made by the team.