Data Privacy Intern

About Comply Ark

Comply Ark is a regulatory infrastructure company building software for data protection compliance under the DPDPA and global privacy regimes. Our product, DataLens, is a full-stack, data-blind compliance platform for the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

The Role

This role spans law, technology, and business. As a Data Privacy Intern, you will research the law, test and shape products against it, and take both to market. This is not a legal internship with technology on the side, or a sales internship with reading attached. Every intern works across all three areas.

Key Responsibilities

• Privacy and Regulatory:
• Read the DPDPA and the DPDP Rules, 2025 at sub-section level, and translate obligations into operational requirements for specific sectors such as banking and fintech, insurance, healthcare, edtech, and e-commerce.
• Track regulatory developments in India and global regimes like GDPR, CCPA/CPRA, LGPD, and PDPL.
• Draft and cite-check knowledge content, with every claim traced to the official text.
• Product and Technology:
• Map legal obligations to DataLens and CookieGate features, and write them up as clear requirements with acceptance criteria.
• Test the products as a compliance officer would: run data principal request flows, review generated records of processing, check consent records, and log issues with reproducible steps.
• Review cookie and tracker classifications, flag misclassifications, and help build reference datasets.
• Build sector-specific demo scenarios and sample data.
• Business Development:
• Research and qualify target accounts in regulated, data-heavy sectors, map their buying committees, and keep the sales tracker current.
• Build and update sector playbooks covering regulatory exposure, typical data flows, buying triggers, and likely objections.
• Support outbound activities and demos with account research, tailored follow-ups, meeting notes, and post-meeting debriefs.
• Support partnerships with law firms and compliance consultancies.

Note: You will not give legal advice to customers or prospects.

Requirements & Tech Stack

• Background:
• Law: B.A. LL.B., LL.B., LL.M.
• Close reading of statute at sub-section level.
• Structured legal writing.
• Working grasp of how privacy regimes compare.
• Technology: B.Tech, B.E., BCA, MCA, B.Sc. in computing.
• Clear model of how systems store and move personal data.
• Basic SQL or Python.
• Business: BBA, B.Com, MBA, PGDM.
• Account research.
• Clear commercial writing.
• Comfort with a CRM or tracker.
• Confidence to speak with senior buyers.
• General Requirements:
• Precise written English.
• A real interest in data protection.
• Comfort with technology; willingness to understand how a product works and test it carefully.
• Good use of AI tools, paired with discipline to verify output against the source.
• Habits for remote work: communicate without being chased, meet deadlines, and communicate issues early.

Qualifications That Will Set You Apart

• A privacy certification such as CIPP/E, CIPP/A, CIPM, or CIPT, or one in progress.
• Published writing, a moot, research, or a project on data protection or technology law.
• Prior internship experience at a law firm, a compliance team, a privacy or security company, or an early-stage startup.
• Hands-on familiarity with browser developer tools, cloud consoles, or consent management platforms.
• Prior work on outreach, partnerships, or sales.

How We Work

The internship is fully remote.

• Agree weekly working hours with regular overlap during Indian working hours for reviews and collaboration.
• Weekly reviews with a founder and a short written update covering what was done, what is next, and what is blocked.
• Work happens in writing, in shared documents and trackers.
• Requires your own laptop and a reliable internet connection.
• Confidentiality and intellectual property agreement signed before starting.

What You Will Get

• Direct work with both founders, with weekly feedback.
• Real ownership of your work contributing to products and conversations.
• Exposure to how enterprise buyers evaluate privacy software.
• Credit for your work where published.
• A monthly stipend, a certificate of completion, and a letter of recommendation.
• Possibility of a pre-placement offer based on performance.