Skip to main content
Arshit Srivastava

Arshit Srivastava

Technology-driven lawyer with 3+ years of experience in regulatory compliance, in-house legal, data privacy, and contract management

Talent
GurgaonMember since August 19, 2026
GDPR ComplianceData PrivacyISO 27001ISO/IEC 27701SOC 2 Type IIHIPAAContract ManagementVendor Due DiligenceData Flow MappingThird-Party Risk ManagementAI GovernanceCyber LawIPR LawCorporate LawUAE PDPLDIFC Laws
·

Hire this person

Send a job offer directly to this candidate

GDPR ComplianceData PrivacyISO 27001ISO/IEC 27701SOC 2 Type II

About

A technology-driven lawyer with 3+ years of experience across regulatory compliance, in-house legal, data privacy, and contract management, I am a BA LLB (Hons) graduate specializing in Cyber and IPR Law. I bring a strong foundation in corporate law, with hands-on expertise in privacy, AI governance, and commercial contracting. A proactive and solution-oriented professional, I am known for strategic decision-making and for leading teams to deliver compliance and legal initiatives with precision and accountability.

With a deep interest in the intersection of technology, AI, and law, I am committed to leveraging legal frameworks to build scalable, compliant, and technology-driven business systems.

Experience

Assistant Manager - Data Protection at PrivacyPillar India, Perfetti Van Melle (Global FMCG Company) (2026-03 – Present)

  • Project Lead for the end-to-end DPDP implementation across the organisation.
  • Led stakeholder discussions to map enterprise data flows, data classification, and supported tool deployment.
  • Delivered gap assessments, ROPA, DFDs, DPIAs, privacy policies, and third-party risk management (TPRM).

Project Lead - Data Protection at PDS Limited (Listed Global Manufacturing Company) (2026-03 – Present)

  • Project Lead for the end-to-end DPDP implementation aligned with the NIST and ISO 27001 Framework.
  • Led stakeholder workshops to map data lifecycles, conduct website privacy gap assessments, support data classification, and facilitate privacy tool deployment along with RoPA, DFD, and Policy documentation

Compliance Support at Battery Smart (Pre-IPO Clean Energy Company) (2026-03 – Present)

  • Supported Stage 1 audit readiness for ISO/IEC 27001 (ISMS) and ISO/IEC 27701 (PIMS).
  • Authored and reviewed ISMS and PIMS privacy policies and supporting compliance documentation.

Project Manager-Compliance at Learntastic Solutions, Inc. (2025-07 – 2026-03)

  • Managed SOC 2 Type II, HIPAA, and privacy compliance, coordinating with external auditors for certification.
  • Handled regulatory and internal compliance functions, overseeing privacy implementation and GDPR audit.
  • Facilitated end-to-end vendor lifecycle management, including drafting and negotiating vendor agreements.
  • Managed a four-member team and led cross-departmental coordination across multiple teams, overseeing compliance subdivisions including internal compliance, regulatory compliance, and bid functions.

Legal Engagement Specialist at Ruvixx, Inc. (2025-03 – 2025-06)

  • Ensured compliance with software licensing terms for a SaaS company, focusing on audit and enforcement.
  • Engaged with entities involved in software piracy or infringement to communicate non-compliance issues.
  • Issued cease and desist notices, escalating matters to legal proceedings where necessary.
  • Prepared detailed reports, delivered presentations to internal stakeholders and external clients.

Legal Executive at High Beam Global (HBG) (2024-08 – 2025-02)

  • Conducted GDPR audits, gap assessments, and prepared remediation strategy.
  • Drafted data privacy agreements and conducted vendor due diligence and compliance assessments.
  • Filed statutory forms (INC-22, DIR-12, MGT-7, and AOC-4) with the Ministry of Corporate Affairs (MCA).
  • Prepared DPDPA and GDPR compliance checklists, mapped data flow, and supported privacy compliance.

Consulting Legal and Privacy Specialist at Mentra FZ LLC (2024-04 – 2024-08)

  • Negotiated data acquisition agreements with counterparties across the UAE, Europe, and India, ensuring legal enforceability under DIFC laws, ADGM regulations, and applicable Free Zone contractual frameworks.
  • Ensured compliance with GDPR, UAE PDPL, and FZ-specific Regulations through the implementation of privacy governance structures, including data minimization and records of processing activities (ROPA).
  • Drafted non-disclosure agreements (NDA), data privacy agreements (DPA), privacy policy, and terms of use.

Education

BA LLB (Hons.) in Cyber Law and IPR Law – ICFAI Law School (2019 – 2024)

Intermediate (Commerce) in Commerce – KBA Public School (2018 – 2019)

High School – Lucknow Public School (2016 – 2017)

Skills

in-house legaldata privacyand contract management

Reviews

Related