Privacy Manager

Our mission at Oura is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and sleep quality by using their Oura Ring and its connected app. We've helped millions of people understand and improve their health by providing daily insights and practical steps to inspire healthy lifestyles.

Empowering the world starts with living our values and empowering our team. As a quickly growing company focused on helping people live healthier and happier lives, we ensure that our team members have what they need to do their best work — both in and out of the office.

The Privacy Manager will play a key role in managing privacy compliance initiatives, privacy operations, and cross-functional privacy projects to facilitate Oura’s compliance with data protection laws. This role requires strong organizational skills, a project management mindset, and the ability to collaborate across multiple teams, including Legal, Security, Product, Engineering, and Marketing.

What You’ll Do

• Scale Program
• Drive and scale Oura’s privacy compliance program by managing cross-functional privacy projects
• Help develop and track privacy workstreams, timelines, and deliverables to support compliance with US and international privacy regulations like the GDPR, EU AI Act, CCPA, CPA, MHMDA, HIPAA, and DFARS 252.204-7012.
• Support the growth of a global privacy compliance program that accounts for global data protection laws like EU GDPR, EU AI Act, as well as US state and federal privacy regulations like CCPA, CPA, MHMDA, HIPAA, and DFARS 252.204-7012.
• Assist with the development of privacy-by-design processes and guidelines for products and technologies to drive business solutions.
• Regulatory Compliance & Risk Management
• Conduct and manage Privacy Impact Assessments and Data Protection Impact Assessments
• Respond to high-complexity data subject requests and escalate to counsel where necessary.
• Maintain Records of Processing Activities and data mapping documentation.
• Third-Party Risk Management
• Evaluate third-party vendors, partners, and AI systems for privacy compliance risks, and document them
• Support vendor due diligence, contract reviews, and privacy risk assessments
• Leverage privacy management platforms to streamline compliance tracking and reporting
• Stakeholder Engagement
• Be a privacy champion across the company by helping to educate teams on privacy best practices, operational requirements, and regulatory updates
• Collaborate with Security, Engineering, Product, Marketing, and People teams to integrate privacy into …