Legal Intern - Children Privacy & Data Compliance

About the Role:

Our product is a K-12 online training application used by schools and families, which means it sits under a patchwork of children's and student data privacy laws in every market it touches: COPPA and FERPA in the U.S., GDPR Article 8 in the EU, the UK's Children's Code, and similar regimes elsewhere. We're looking for a law student or recent law graduate to help us map that landscape for our application as well as helping bring our Terms and Conditions and Privacy Policy in line with it.

Expectations:

● Research and summarize children's and student data privacy laws applicable to an EdTech product operating in [list target markets], including COPPA, FERPA, GDPR Article 8 (age-of-consent variance by EU member state), the UK Children's Code (Age Appropriate Design Code), Australia's Online Safety Act and eSafety Commissioner requirements, Canada's PIPEDA, Brazil's LGPD Article 14, India's DPDP Act Section 9, and other regimes based on where the product is marketed or sold.

● Draft and redline the company's Terms and Conditions and Privacy Policy to reflect those requirements.

● Build and maintain a jurisdiction-by-jurisdiction compliance checklist/matrix.

● Support responses to school and district data privacy agreements and vendor privacy assessments (e.g., U.S. state student data privacy pledges).

● Flag legal risk areas to the founder as they come up, and escalate anything urgent.

Qualifications:

● Currently enrolled in, or recently graduated from, an accredited law program (JD or LLM) or an equivalent international law degree.

● Coursework or demonstrated interest in privacy law, data protection, technology law, or education/children's law.

● Familiarity with COPPA and/or FERPA and/or GDPR is strongly preferred; an IAPP certification (CIPP/US, CIPP/E) is a plus but not required.

● Strong legal research and writing skills.

● Comfortable working independently and asynchronously in a remote, early-stage startup environment.