Ameer Riaz
Data Privacy | Information Technology Law | Governance, Risk & Compliance
I am a legal professional with a focused interest in the intersection of data protection, information technology, regulatory governance and emerging technologies and AI & Governance
With an academic background in law and specialised postgraduate education in Data Privacy and Information Technology Law, I am particularly interested in how legal frameworks translate into operational realities, how organisations approach privacy governance, and how technology can make regulatory compliance more effective.
My areas of interest include India's Digital Personal Data Protection Act, 2023, the DPDP Rules, 2025, GDPR, privacy governance, GRC frameworks, cybersecurity and technology regulation.
I have explored the practical side of compliance through working with Vanta, developing regulatory compliance controls, and examining how statutory obligations can be translated into structured governance and risk management processes.
Beyond regulatory compliance, my academic interests extend to intellectual property and technology law. My postgraduate dissertation explored copyright law in the age of Generative AI, A comparission between Indian and USA Laws, reflecting my broader interest in how existing legal frameworks respond to evolving digital ecosystems.
Beyond the Law
I believe understanding regulation is only one part of the equation. The real challenge lies in translating legal requirements into systems, processes and solutions that organisations can actually implement.
That thinking led me to independently conceptualise and build DPDP MatriX, a privacy law and technology initiative focused on India's evolving data protection landscape.
Through this initiative, I explore the intersection of legal research, product thinking and technology, developing practical tools and resources that address different aspects of privacy governance and compliance.
For me, it is an opportunity to move beyond interpreting the law and explore how it can work in practice.
Let's Connect
I am always interested in meaningful conversations, new challenges and opportunities to contribute to the evolving field of data privacy, information technology law and regulatory compliance.
I am currently open to professional opportunities in data privacy, data protection, privacy operations, GRC, regulatory compliance and related areas.
If my interests align with what your organisation is building, I'd be glad to connect.