Every product decision has a legal shadow. As a PM, you define features, approve data flows, set pricing claims, and choose vendors — each of these carries legal implications.
Key Concepts
Legal Liability Chain: PMs sit at the intersection of design, engineering, and business. If a feature violates privacy law or makes a misleading claim, the PM's PRD is the origin document.Every product decision has a legal shadow. As a PM, you define features, approve data flows, set pricing claims, and choose vendors — each of these carries legal implications.
Key Concepts
Legal Liability Chain: PMs sit at the intersection of design, engineering, and business. If a feature violates privacy law or makes a misleading claim, the PM's PRD is the origin document.Regulatory Landscape: India's IT Act 2000, DPDP Act 2023, Consumer Protection Act 2019, and the EU AI Act all directly affect AI product decisions.Cost of Ignorance: WhatsApp's €225M GDPR fine, Google's ₹1,337 Cr CCI penalty, and Clearview AI's bans — all stemmed from product decisions, not engineering bugs.Frameworks
Legal Risk Radar: Map every feature against 5 legal zones — IP, Privacy, Consumer Law, Contracts, and RegulationPM-Legal Collaboration Model: Early Legal Review → Feature Gate → Launch Audit → Post-launch MonitoringWhy This Matters
| Product Decision | Legal Implication |
|---|
| Collecting user emails | Privacy law compliance (consent, retention) |
| Using third-party AI API | IP ownership of outputs, data sharing terms |
| Claiming "AI-powered accuracy" | Consumer protection — misleading claims |
| Training on user data | Data protection, consent requirements |
| Deploying in EU market | EU AI Act risk classification |
Common Misconceptions
"Legal will handle it" — Legal cannot fix what they don't know about"We're a startup, laws don't apply yet" — Laws apply from Day 1PMs don't need to be lawyers — but they must spot red flags early