What you'll do:
- Privacy by Design & Data Protection Impact Assessments (DPIAs): Investigate real products and data uses — including AI — map data flows, identify privacy risks and prepare assessments.
- Data Subject Requests (DSRs): Help handle DSRs end-to-end and help us redesign and automate our DSR process as volumes grow.
- Vendor & data-use assessments: Support vendor due diligence, DPA reviews, data access/download and external data-sharing assessments.
- Privacy governance: Support ROPA and selected data-governance work.
- Automation & improvement: Find repetitive or inefficient privacy processes and help us build better workflows, monitoring or automation.
- Research: Research privacy, technology, data and AI issues when needed to solve a real problem.
What you’ll Need:
- Particularly interest in individuals with strong judgment and genuine curiosity about technology, privacy and data.
- To enjoy messy problems, know how to ask good questions, communicate clearly and be interested in understanding products and systems — not only legal doctrine.
- Knowledge of the PDPA and related data privacy law is highly preferable, but prior privacy experience is not required. Technical or automation skills (including AI, data analytics, SQL, Python or similar tools) are a big plus.
- We're also open to exceptional candidates from technology, data or other backgrounds who can demonstrate strong analytical judgment and an interest in privacy.
High-performing interns may be considered for future full-time opportunities.
