At Oura, our mission is to empower every person to own their inner potential. With our award-winning Oura Ring and app, we help over 2.5 million people turn insights about sleep, activity, and readiness into healthier, more balanced lives. We believe that starts from within — by creating a culture where our team feels supported, included, and inspired to do their best work. <a href="https://ouraring.com/about-us">Our values</a> guide how we show up for each other and our community every day.We have offices in San Francisco, San Diego and Los Angeles for those who prefer hybrid or office settings. Oura employees in other major cities (like Boston and New York) occasionally gather informally at local co-working locations. The AGC, Senior Director of Regulatory Compliance &amp; Privacy will provide strategic legal guidance on all aspects of compliance on behalf of the global org, including global health product, corporate, and privacy compliance programs, ensuring Oura’s wearable technology and healthcare solutions adhere to legal and ethical standards. Reporting to the VP of IP and Regulatory Compliance, this role will be responsible for advising on regulatory risk, marketing claims, product labeling, corporate compliance initiatives, and will oversee the privacy compliance function at Oura, including oversight of Privacy Counsel and Privacy Specialist. This is a high-impact leadership role that requires the ability to proactively assess risk, develop scalable compliance frameworks, and influence cross-functional teams. The successful candidate will possess expertise in FDA frameworks governing digital health products, including wearable devices and related software, including Software as a Medical Device (SaMD), Software in a Medical Device (SiMD), and AI/ML-enabled health solutions, and demonstrate a strong understanding of and experience with corporate compliance programs. This role offers an opportunity to play a key role in a fast-paced, innovative environment, balancing privacy and regulatory compliance with commercial objectives.What you will do: FDA &amp; Global Regulatory Compliance:<ul> <li>Serve as the primary legal advisor on FDA, EU MDR, and other global health compliance requirements, and corporate regulatory risk for wearable-based health technology.</li> <li>Provide strategic counsel on FDA oversight, regulatory submissions, and compliance strategies for biometric tracking, AI-driven diagnostics, real-world data applications, and health and wellness claims.</li> <li>Provide legal and regulatory oversight for clinical studies and evidence generation, including IRB approvals, informed consent, and compliance with FDA, Common Rule, EU MDR, and GDPR requirements for human subjects research, and retrospective studies.</li> <li>Oversee labeling and marketing compliance, ensuring that product claims align with legal requirements while maintaining competitive positioning, and advise on permissible health claims, ensuring compliance with FDA, FTC, and global consumer protection laws.</li> <li>Serve as a key legal advisor on regulatory enforcement matters, including FDA warning letters, FTC inquiries, and global regulatory audits.</li> <li>Monitor evolving regulatory guidance and guide teams on risk-based approaches to regulatory compliance in product development, clinical validation, and market positioning.</li> <li>Oversee compliance with Quality System Regulation (QSR) and Good Manufacturing Practices (GMPs), as well as post-market compliance, including Medical Device Reporting (MDR), product recalls, corrective actions, and field safety notices, ensuring alignment with FDA expectations.</li> <li>Advise on cross-border regulatory challenges, ensuring seamless market entry while managing jurisdictional risks.</li> <li>Collaborate with the supply chain team to oversee global trade compliance, ensuring adherence to import/export regulations, customs laws, and free trade agreements affecting medical devices and consumer health products.</li> <li>Provide legal guidance on supply chain risk management, including restricted party screening, export controls (EAR &amp; ITAR), and compliance with OFAC sanctions programs.</li> <li>Support classification of products under Harmonized Tariff Schedule (HTS) codes and ensure accurate country-of-origin documentation.</li> <li>In collaboration with Oura’s healthcare and government relations teams, represent the company in interactions with regulators, trade associations, and industry groups, shaping policy discussions around digital health regulation.</li> <li>Provide updates to leadership on regulatory and corporate compliance risks, emerging trends, and strategic mitigation efforts.</li> </ul>Privacy Compliance Oversight:<ul> <li>Manage Oura’s privacy team to ensure data privacy program compliance with HIPAA/HITECH, GDPR, new omnibus U.S. state privacy laws, and other relevant data protection laws in the context of health data collection and processing.</li> <li>Oversee the Privacy Counsel and Privacy Specialist, driving the compliant aspects of privacy, including responsibility for ensuring maintenance of data inventories, PIAs, and data subject rights requests to ensure robust data privacy practices are integrated into regulatory submissions and compliance strategies.</li> <li>Conduct internal audits and investigations related to privacy and compliance, including working with Oura’s Data Privacy Officer on data protection impact assessments, audits, and incident response.</li> <li>Develop and deliver training programs, and collaborate with internal and external stakeholders to promote a culture of compliance and integrity.</li> </ul>Corporate Compliance &amp; Ethics Program Leadership:<ul> <li>Develop and oversee the company’s ethics and compliance program, ensuring alignment with global best practices and regulatory expectations.</li> <li>Lead anti-bribery and anti-corruption (ABAC) compliance, ensuring adherence to FCPA, UK Bribery Act, and other international frameworks.</li> <li>Implement and manage corporate compliance policies, including conflicts of interest, whistleblower protections, and code of conduct.</li> <li>Drive internal compliance training and awareness programs to strengthen ethical decision-making and regulatory adherence across the organization.</li> <li>Partner with the Sr. Director – Global Risk &amp; Asset Protection on investigative matters related to regulatory compliance, ethics concerns, and corporate misconduct.</li> </ul>We would love to have you on our team if you have: <ul><li>10+ years of legal experience, including both private practice and in-house, in corporate healthcare regulatory compliance, privacy compliance, and ethics programs, preferably in digital health, diagnostics, wearables, or consumer health technology.</li></ul><ul> <li>Deep expertise in FDA regulations, including oversight of biometric tracking, AI-driven health diagnostics, and digital health compliance.</li> <li>Strong understanding of FTC advertising regulations and global health product labeling laws.</li> <li>Proven experience in developing and implementing privacy compliance programs within a regulated environment, with a strong understanding of global data protection laws (e.g., HIPAA, GDPR, CCPA/CPRA) and their application to health-related data.</li> <li>Expertise in managing corporate ethics and compliance programs, including anti-bribery and anti-corruption initiatives.</li> <li>Ability to interpret and influence evolving regulatory frameworks, ensuring legal compliance while enabling innovation.</li> <li>JD degree with bar admission in at least one U.S. jurisdiction.</li> </ul>