What the work actually involves

You will spend most of your time producing and grading realistic privacy deliverables. A typical task looks like: given a fact pattern about a new HR analytics tool, draft the DPIA a controller would actually file — including necessity and proportionality analysis, risk scoring, and mitigations — then evaluate two model attempts at the same brief and explain, in writing, where each one drifts from what a supervisory authority would accept. Other days you'll be building a RoPA spreadsheet with correct Article 30 fields and working formulas, redlining a vendor DPA against SCC module selection and sub-processor flow-down, or turning a CCPA gap assessment into a board-ready slide deck.

The format matters as much as the substance. These are document, spreadsheet, and slide tasks, and the lab cares whether the output is genuinely usable: a RoPA with broken column logic, or a privacy notice that reads like a summary of the GDPR rather than a notice a data subject could act on, fails the task even when the legal analysis is sound.

What the screen looks for

  • Direct ownership, not adjacency. Reviewers probe whether you personally ran DPIAs and RoPAs or sat near someone who did. Expect follow-ups on specific regimes, thresholds, and the choices you made.
  • Regime precision. GDPR and CCPA/CPRA are not interchangeable, and the screen will test whether you treat them that way — legal basis versus notice-and-opt-out, controller/processor versus business/service provider.
  • Evaluation judgment. Can you articulate why a plausible-sounding AI draft is wrong, at a level of detail another reviewer could act on? Vague rubric language scores poorly.
  • Artifact craft. Formatting, structure, and spreadsheet mechanics are graded, not assumed.

Logistics

Fully remote and asynchronous — tasks are claimed from a queue and completed on your own schedule, with 5–20 hours per week typical and more available to consistent contributors. There is no fixed shift, but turnaround windows on individual tasks are real, so the work suits people with predictable weekly blocks rather than sporadic availability. The interview process includes an AI voice screen; the $90/hour figure is the observed rate on this engagement, not a guarantee.