Module 1 • Lesson 3

Working With Your Legal Team

Learn how to collaborate effectively with legal counsel — when to loop them in, what to prepare, and how to translate PM-speak to legal-speak.

Working With Your Legal Team

Effective PM-legal collaboration is a product skill. The best PMs know when to loop in legal, what to prepare, and how to translate product language into legal questions.

When to Involve Legal

Effective PM-legal collaboration is a product skill. The best PMs know when to loop in legal, what to prepare, and how to translate product language into legal questions.

When to Involve Legal

StageAction
IdeationFlag features involving personal data, AI decisions, or health/finance claims
PRD DraftLegal review before engineering begins — cheapest time to catch risks
Design ReviewConsent flows, dark patterns, disclaimers
Pre-LaunchFinal audit of claims, ToS, privacy policy updates
Post-LaunchIncident response, regulatory changes, user complaints

What Legal Teams Need From PMs

  • Feature Brief: What the feature does in plain language
  • Data Flow Diagram: What data is collected, where it goes, who processes it
  • Third-Party Dependencies: APIs, SDKs, datasets — and their terms
  • User-Facing Claims: Exact wording of any accuracy, outcome, or performance claims
  • Target Markets: Jurisdictions where the product will be available
  • What Legal Teams Hate

  • Being looped in after the feature is built
  • Vague questions like "Is this legal?"
  • Missing context on data flows and third-party tools
  • Assuming legal approval means zero risk
  • How to Frame Legal Questions as Product Questions

    ❌ Bad Question✅ Good Question
    "Is this legal?""We collect email + location for personalisation. Do we need explicit consent under DPDP Act?"
    "Can we use this API?""This API's ToS says they may train on our data. Does this create IP risk for our proprietary prompts?"
    "Do we need a disclaimer?""Our AI suggests investment actions. What disclaimer language meets CPA 2019 requirements?"

    When to Self-Assess vs. Escalate

    Self-assess (PM can handle):

  • Standard consent checkbox additions
  • Open-source licence compatibility checks (MIT, Apache)
  • Basic privacy policy updates for new data fields
  • Escalate to legal (must involve counsel):

  • New data categories (health, financial, biometric)
  • AI features making consequential decisions (credit, hiring)
  • New market entry (EU, Middle East, US)
  • Third-party vendor agreements with unusual IP clauses
  • Any feature involving children's data
  • Key Takeaway

    The PM-legal relationship is a partnership. PMs who prepare well get faster, more actionable legal guidance — and ship more confidently.

    Read to the end of the lesson to mark it as read.