This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Shopify's Regulatory and Privacy Legal team is the front line for every regulatory, privacy, and data protection issue that touches the platform. We advise product and engineering teams on how to build things that work for merchants and comply with the law — often in jurisdictions where the law is still being written. We handle regulator inquiries, manage privacy incidents, negotiate with partners on data practices, and build the internal frameworks that make all of it scale. The team sits within Legal and works closely with, well, just about every other team in the company.
Job Responsibility:
Provide privacy counsel on complex product launches, new features, and strategic partnerships
Partner on managing regulatory relationships and responses for privacy-specific inquiries
Drive cross-functional privacy initiatives
Advise on data protection aspects of commercial agreements
Partner with Privacy Engineering and Trust on incident response, data governance, and compliance infrastructure
Maintain subject matter expertise in evolving global privacy law
Requirements:
Qualifying law degree and license to practice in the US, Canada, Ireland or the UK
8+ years of relevant legal experience
Substantial experience advising on privacy and data protection matters, including both GDPR and CCPA
Technical curiosity
Experience managing outside counsel
Privacy certification (CIPP/US, CIPP/E, CIPM) is a plus but not required
Nice to have:
Experience engaging with regulators or enforcement agencies on privacy matters
Experience advising on AI and data governance issues
Experience building or shipping something using AI tools