Legal Intern, Data Security & Privacy

Key Responsibilities

• Review client contracts, MSAs, SOWs, NDAs, and vendor agreements from a security, privacy and data protection perspective.
• Review and negotiate DPAs, BAAs, Standard Contractual Clauses and information security schedules.
• Identify security and privacy obligations the organisation cannot meet and propose alternatives.
• Draft and maintain internal policies on information security, data protection, data retention, access control and incident response.
• Ensure security measures committed to clients are implemented, in coordination with IT/Infosec.
• Ensure compliance with the DPDP Act, 2023, IT Act, 2000, CERT-In directions, GDPR, HIPPA and other applicable privacy laws across globe.
• Handle client security audits, questionnaires and due diligence.
• Manage legal aspects of data breach response and notifications.
• Conduct employee training on data protection and security.

Qualifications

• LL.B. / BA LL.B. / BBA LL.B.; LL.M. or diploma in Cyber Law / Data Privacy preferred.
• Experience in data protection, privacy or technology contracts, preferably in an IT/ITeS company.
• Certifications such as CIPP/E, CIPM, ISO 27001 or DCPP will be an advantage.

Skills Required

• Strong legal research, analytical, and drafting skills.
• Knowledge or specialisation in Cyber Law, Cybersecurity, Data Privacy, or Technology Law.
• Good written and verbal communication skills.
• Attention to detail and the ability to interpret legal provisions.
• A keen interest in corporate legal operations and technology-related legal compliance.