Principal Counsel, Regulatory & Privacy

Join the Sleep Fitness Movement
At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience.
Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world-class talent, and help shape a future where sleep isn’t passive — it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.
High Standards. No Apologies.
We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. This isn’t a 9-to-5. Our team is deeply committed, often putting in the extra effort — not because we’re told to, but because we’re invested in building something category-defining.
The Role
Eight Sleep’s legal team is one person today: our first in-house legal counsel, who handles everything from IP and litigation to privacy, regulatory, and commercial matters. You’d be the second lawyer, reporting to her, and for a while the team is the two of you.
Your home-base is privacy and regulatory, and there’s a lot of it: the privacy program, FTC and consumer protection, advertising and subscription compliance, product and market-entry questions, and the healthcare-regulatory work that comes with our newer product lines. But this isn’t a role for someone who only wants to live in that lane. What matters most is that you’re willing to take on whatever lands on the department, and that you’re a genuine generalist, just as comfortable picking up a commercial contract, a litigation question, or a product counseling call when that’s what the week calls for.
This is a build role. The company has grown quickly and the legal function is still taking shape, so you’ll be creating programs and processes rather than inheriting them, with a lot of room to own your work. It’s a good fit for someone who’s a self-starter, works hard, and is comfortable making decisions on their own without a lot of process.
Responsibilities
Privacy and data protection
- Build and run our global privacy program across the frameworks that to us (CCPA/CPRA, GDPR, and others): disclosures, consent, records of processing, and data subject requests.

- Own data processing agreements across our vendors, cross-border transfer and localization compliance, and our breach response playbook.

- Handle compliance for the biometric and health data at the center of our product, and run privacy reviews for new features, integrations, and AI models.

Regulatory and consumer protection
- Own FTC and consumer protection: health and wellness claims, advertising review, and subscription and auto-renewal compliance across our markets.

- Keep a practical read on what each market requires (product registration, import, labeling, disclosures) so we clear the way before we launch somewhere new.

- Track medical device and healthcare-regulatory questions as our health features grow, and help scope the legal path for new product categories (FDA classification, corporate practice of medicine, anti-kickback, HIPAA).

Beyond privacy and regulatory (this part matters here)
- Take on whatever the department needs outside your core area: commercial contracts, litigation support, product counseling, and the rest of the in-house docket.

- Act as embedded counsel to product and engineering, and help build out the function and legal operations alongside our in-house counsel.

Required