Data Protection
& Compliance
Intern
Junior Data Protection Officer
Role at a Glance
Junior DPO — data, privacy & compliance
yohanalaurent23@gmail.com
Building healthcare
infrastructure for Tanzania.
Apilox Health is a Tanzania-based digital health platform focused on improving access to medicines and healthcare services. We connect patients with pharmacies for prescription refills, medical purchases, and real-time medicine availability. Our mission is to make healthcare more accessible, affordable, and responsive across communities.
As we prepare for launch, we are strengthening our data protection and compliance practices to ensure safe, ethical, and responsible handling of health data.
Health data is among the most sensitive information a person can share. Getting compliance right from the start isn't just a legal checkbox — it's how we earn patient trust and keep it.
What you'll be doing.
Working closely with the founding team, you'll support the development and implementation of our data protection framework from the ground up.
Policy Development
Assist in developing and maintaining Apilox's data protection policies and procedures aligned with PDPA and international best practices.
Privacy & Consent
Support implementation of data privacy and consent management practices within the platform for both patients and pharmacies.
Data Documentation
Help document how user data is collected, stored, and processed — creating clear records of data flows across the system.
Compliance Monitoring
Monitor internal processes to ensure ongoing compliance with data protection standards and flag any deviations early.
Risk Identification
Identify potential data privacy risks across our operations and report them to the team with recommended remediation actions.
Policy Drafting
Assist in drafting and updating privacy policies, user terms, cookie notices, and consent disclosures across all platforms.
Record Keeping
Maintain organized records related to data protection and compliance activities, audit trails, and incident logs.
DPO Point of Contact
Serve as a supervised point of contact for basic data protection inquiries from internal teams and external stakeholders.
Who we're looking for.
You don't need years of experience. You need curiosity, integrity, and a genuine interest in data privacy and digital health.
Educational Background
Currently pursuing or recently completed a degree in one of the following:
Basic understanding of data privacy, confidentiality, or regulatory compliance principles.
Strong organizational skills and high precision when reviewing policies, records, and legal language.
High ethical standards. You will handle sensitive health data — this is non-negotiable.
Good written and verbal communication — able to explain complex compliance requirements in plain language.
Willingness to learn fast, adapt quickly, and work with autonomy in an early-stage environment.
Your return on time invested.
This is a learning-first role. We will invest in your growth — and you'll leave with more than a line on your CV.
Hands-on Experience
Real work in digital health compliance and data protection — not just observation or filing.
Tech System Exposure
Exposure to real-world healthcare technology systems — APIs, databases, consent flows, and more.
Startup Impact
Opportunity to directly contribute to a high-impact healthtech startup from its earliest stage.
Mentorship
Direct mentorship from founders and the technical team — not just a supervisor's email chain.
Completion Certificate
Formal certificate of completion recognizing your contribution to Apilox's compliance program.
Professional Reference
A strong professional reference from the founding team upon successful completion of the internship.
Flexible by design.
We believe great work happens when people have structure without rigidity. Here's what this role looks like in practice.
Type
Internship / Part-time / Volunteer
Flexible based on your availabilityLocation
Dar es Salaam
Hybrid or Remote possibleDuration
3 – 6 months
With possibility of extensionReporting To
Founding Team
Direct mentorship from leadershipThis is a junior-level role under supervision, designed to support early-stage compliance efforts while building capacity in data protection practices within the organization. Experience is welcome but not required — we care more about character, curiosity, and commitment.
Ready to make an impact?
We review every application personally. No automated filters, no gatekeeping. If this role resonates with you, we want to hear from you.
Prepare your materials
Your CV (or LinkedIn profile) and a short statement of interest — 2–3 sentences on why data protection in digital health matters to you.
Send your application
Email both to yohanalaurent23@gmail.com with the subject line below. No cover letter required — just be honest.
We'll be in touch
We review applications weekly. If there's a fit, you'll hear back within 7 business days for a brief intro call.