Legal Intern, Privacy

About the Role:

The Privacy Legal Intern will be an integral part of Upgrade's privacy legal team in San Francisco. This exciting 3-month summer internship offers a unique opportunity to gain practical legal experience in the dynamic and critical field of data privacy and protection. You will directly contribute to building and improving privacy contract processes, enhancing data-driven legal technology implementations, and working closely with experienced attorneys and contract managers to support key legal department objectives. This role provides significant exposure to real-world privacy challenges and the development of internal privacy processes within a high-growth fintech environment. As a valued member of the legal team, you will play a meaningful role in optimizing our contracting processes and gaining valuable insights into in-house commercial legal practice with a strong privacy focus.

• Location: SF Bay Area. Flexible hybrid work schedule: Tuesdays and Thursdays in office.
• Schedule: Full Time (3 month duration) Start date May 19, 2025

What You’ll Do:

• Develop a comprehensive understanding of the key characteristics of commercial agreements and, with a specific focus, Data Processing Agreements (DPAs). You will assist in the review, drafting, and negotiation of DPAs under the close supervision of a member of the legal team to ensure compliance with applicable data protection laws.
• Contribute to the development and implementation of internal company processes related to privacy compliance, such as data subject rights request handling, consent management, and data transfer mechanisms. Develop a strong understanding of modern legal operations tools, including project management platforms, contract lifecycle management (CLM) systems, and data lifecycle management software such as Ironclad, OneTrust, and Jira.
• Assist in the meticulous maintenance of our contract repository, including auditing, organizing, and archiving legal agreements in accordance with established department procedures within our Ironclad and OneTrust platforms.
• Accurately track, update, and contribute to the improvement of contract data within contract lifecycle management tools like Ironclad.
• Assist attorneys and contract managers with routine requests and the efficient management of contract workflow processes.
• Provide general administrative and project support for legal department initiatives and the implementation of legal technology solutions as needed.
• Learn and demonstrate a strong understanding of the regulatory and risk environment surrounding data privacy through focused research and proactive issue-spotting, all under the guidance of experienced legal counsel.
• Accompany legal team members to substantive meetings across the organization to gain firsthand exposure to privacy-related discussions and decision-making processes.

What We Look For:

• Must currently be enrolled in law school at a US accredited college or university, with an anticipated graduation date of Spring 2025 or later.
• Demonstrated strong interest in and foundational understanding of the broader landscape of consumer data protection laws and regulations in the US and internationally. This includes, but is not limited to, laws concerning data privacy (e.g., CCPA/CPRA, GDPR, other US state laws), data security, marketing and advertising (e.g., TCPA, CAN-SPAM), financial data (e.g., GLBA), and emerging areas like artificial intelligence (AI) regulation and biometrics.
• Completion of relevant law school coursework or holding an IAPP certification (e.g., CIPP/US, CIPP/E) is a strong advantage.
• Basic proficiency with Microsoft Office products (including Excel), project management software, and/or contract lifecycle management (CLM) software; data entry experience is preferred, along with familiarity with Slack and Google Workspace (G Suite).
• Exceptional project management and time management skills: You possess sound judgment in time-sensitive, high-pressure situations, can work autonomously and independently with minimal guidance, and are also a collaborative team player.
• Excellent analytical and problem-solving skills with meticulous attention to detail and a commitment to accuracy.
• Eagerness to learn about the fintech industry and the practical application of privacy law within an in-house commercial legal setting.
• Ability to manage multiple tasks effectively, work independently, take ownership of responsibilities, and consistently meet deadlines.
• Familiarity with privacy-enhancing technologies or concepts is a plus.

What We Offer You:

• Paid internship providing valuable legal experience.
• Hybrid work schedule in San Francisco, offering a blend of in-office collaboration and remote work flexibility.
• Invaluable experience working within the legal department of an exciting, high-growth fintech company.
• Direct mentorship and learning opportunities from experienced privacy legal professionals.
• Exposure to real-world privacy challenges and the practical application of legal principles in a fast-paced environment.
• Opportunity to contribute meaningfully to key privacy initiatives and see the direct impact of your work