Legal Intern - Data Privacy

About the role

This internship places you within Voodoo's Corporate Legal team, reporting directly to the Head of Legal

Regulatory, where your work will directly support the compliance framework for products used by over 200 million people. You will be responsible for maintaining and updating records of processing activities and data protection impact assessments to ensure internal documentation remains current and accurate. The role requires you to conduct substantive work on data related topics spanning gaming and social media verticals, including the assessment of new features and A B testing initiatives. You will track regulatory developments in GDPR and major US data protection laws such as CCPA and COPPA to ensure our practices align with current legal standards. A core part of your responsibilities involves drafting and updating privacy policies, user notices, and internal training materials to communicate compliance obligations clearly. You will handle data subject rights requests, managing processes for access, erasure, and objection in a timely and precise manner. Furthermore, you will support communications and follow up with regulators such as the CNIL and the EDPB on ongoing digital regulation matters affecting our platforms.

Key facts

What you'll do

• Maintain and update records of processing activities and assist in the coordination of data protection impact assessments across product lines.
• Conduct substantive analysis on data related topics, including new features and testing initiatives within gaming and social media applications.
• Monitor regulatory developments and interpret changes in GDPR and US data protection laws, including CCPA, VCDPA, and COPPA.
• Draft and update privacy policies, user facing notices, and internal training materials to ensure clarity and regulatory alignment.
• Handle data subject rights requests, coordinating internal responses for access, erasure, and objection in accordance with legal timelines.
• Support communications with the CNIL and the EDPB, including the preparation of documentation and follow up on ongoing regulatory matters.
• Analyze digital regulation issues specific to games and platforms, translating complex legal requirements into practical operational guidance.
• Collaborate with cross functional teams to ensure product features are designed and launched in compliance with data protection obligations.
• Summarize intricate legal concepts into clear documents and training resources for internal stakeholders to enhance compliance awareness.
• Contribute to the continuous improvement of compliance documentation, ensuring that policies and procedures reflect current legal standards and business practices.

Requirements

• You are enrolled in a Master's degree program in Law, such as Digital Law, Data Protection Law, Business Law, or an equivalent field.
• You are completing a mandatory 6 month internship or apprenticeship agreement that is part of your final year or gap year curriculum.
• You possess a strong command of GDPR principles, regulations, and their practical application to digital products and services.
• You have strong knowledge of US data protection laws, including the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, and the Children's Online Privacy Protection Act.
• You demonstrate a strong interest in digital regulation and its impact on technology driven businesses and consumers.
• You show a strong interest in the technology and gaming sectors, understanding the specific compliance challenges they present.
• You are rigorous and autonomous, with the ability to analyze complex information and summarize key points effectively for decision making.
• You have a good level of English, which is essential for working in an international environment and communicating with regulators and stakeholders.

Practical notes

• Duration: 6 months.
• Internship must be part of your mandatory internship or apprenticeship agreement as part of your Master's degree curriculum.

-

Location: Paris.

• Remote days may be available under the company's flexible remote work policy.
• The role involves direct support to regulatory compliance activities within a fast growing, highly regulated tech environment.