Privacy · AI Enablement · Regulatory

Philipp
Hultsch

Privacy Program Manager and AI Enablement lead with seven years across Snap, X/xAI, and large-scale platforms. Leading DSA enforcement response and FTC compliance while shipping production AI tools that Legal and Privacy now run on.

Los Angeles, CA FTC · EC · ICO · Ofcom · DPC AI tooling in production
Scroll to explore
01

Core Expertise

AI Tooling for Legal & Privacy

Building and shipping production AI tools — agents, routers, and generators — on enterprise infrastructure for Legal and Privacy teams.

AI Enablement

DSA / EMFA / OSA Compliance

Leading EC enforcement response, EMFA posture definition, OSA gap assessment, and VLOP-level risk assessments.

Regulatory

FTC Consent Order Programs

End-to-end audit ownership as primary regulator-facing lead. Zero findings track record across multiple annual cycles.

Regulatory

Children's Safety & Age Assurance

CA/UK AADC compliance, age assurance architecture advisory, and briefing materials for regulators and government officials.

Online Safety

DPIA & DDIA Authorship

Authoring and owning privacy impact assessments across Trust & Safety, Ads, Core Product, and GenAI consumer features.

Privacy

Regulator Engagement

Primary liaison to the FTC, EC, ICO, Ofcom, and DPC — intake, prioritization, and execution of inquiries and compliance submissions.

Regulatory

AI Risk & Governance

Presenting AI legal risk to CEO-level leadership; authoring sensitivity tiering frameworks for enterprise AI tool deployment.

AI Enablement

Incident Response

Privacy and data protection incident lead — cross-functional containment, remediation, and regulator notification.

Privacy
02

Experience

Snap Inc.

Feb 2025 – Present

Privacy Program Manager · AI Enablement

Los Angeles, CA

Regulatory & Privacy (50%)
  • Leading Snap's response to EC Decision C(2026) 2157 covering five DSA enforcement cases — owns action plan, source-level decision extraction, and coordination with external counsel (Brinkhof).
  • Drafting Snap's DSA Annual Risk Assessment; built competitive benchmarking analysis across VLOPs (Meta, Google, TikTok, LinkedIn, Pinterest).
  • Defined EMFA MVP compliance posture (MSP self-declaration, public registry, VMP tier); led Brinkhof engagement and drafted internal one-pager for Legal leadership.
  • Authored CA AADC and UK AADC compliance memos; prepared AG presentation on age assurance architecture and briefing materials for a prime minister meeting on child safety.
  • Managing OSA ICCOP response table; running location data privacy review across Maps and Ads/Targeting; leading chat metadata retention remediation with Data Science.
AI Enablement — Legal & Privacy (50%)
  • Built and shipped p3-build (SPEC Generator) on Snap's mesh infrastructure (Switchboard, GCP, Vertex AI / Gemini 2.5 Flash) with full CI/CD pipeline — now in production use by Product Counsel.
  • Deployed DDIA Update Agent and PASS Intake Router in Glean; designed 24-bot grid strategy spanning six pillars of Snap Legal's AI roadmap.
  • Co-presented AI legal risk at CEO-level leadership session covering preservation/discovery, copyright, and data access.
  • Authored AI tool sensitivity tiering framework (Tier 0–3) for Glean and Gemini usage across Legal; mapped Jira projects to DDIAs for privacy review traceability.

Twitter / X / xAI

Mar 2024 – Feb 2025

Sr. Program Manager, Product Privacy & FTC Compliance

Los Angeles, CA & New York, NY

  • Served as final reviewer for privacy and regulatory reviews across all major product launches and material changes.
  • Authored DPIAs across Trust & Safety, Ads, and Core Product; submitted documentation to the FTC, ICO, and DPC.
  • Owned quarterly FTC reporting; led privacy incident response and regulator liaison across all active inquiries.
  • Oversaw annual FTC audit deliverables across six compliance domains — zero audit findings in the 2025 cycle.

Twitter / X

Apr 2022 – Mar 2024

Privacy Program Manager

Los Angeles, CA

  • Built company-wide review process for public privacy commitments, aligning external statements with operational reality.
  • Stabilized compliance operations following a ~60% reduction in force, preserving all regulator-facing deliverables.
  • Designed and scaled global privacy onboarding program ("Doves"), reaching 500+ employees across Engineering, Product, and Legal.

Accenture

Mar 2021 – Apr 2022

Technology Strategy & Advisory Consultant

Los Angeles, CA

  • Led post-merger integration planning for 32 initiatives totaling $130M in planned spend; consolidated into a single enterprise transformation roadmap.
  • Designed executive reporting systems, cutting leadership reporting prep time by ~50%.

Deloitte / Meta

Jul 2019 – Mar 2021

Business Technology Analyst

Los Angeles, CA & San Francisco, CA

  • Embedded with a large social platform's anti-scraping team; designed strategic response and enforcement frameworks for cross-border data misuse across Legal, Policy, and Engineering.
  • Standardized investigative workflows across international teams, reducing average case handling time from days to hours.

Let's connect.

Open to conversations about regulatory strategy, AI enablement for legal teams, and platform governance.

phultsch@gmail.com Email linkedin.com/in/phultsch LinkedIn (973) 906-5155 Phone