Lomash Bidua

About Lomash Bidua

I help fast-growing startups and fintechs stay on the right side of data protection and regulation while they scale.At Yubi, I lead client audits and data protection, making sure global enterprise and financial clients can trust that we’re secure, compliant, and audit‑ready across India and key markets. Over the last 10 years, I’ve worked across India, UK, US, Singapore and UAE, turning messy, evolving laws into clear, founder-friendly decisions.Today, I wear three hats- Legal–DPDP–startup specialist: Leading DPDP implementation and privacy governance at Yubi, with a focus on audit resilience, vendor risk and client assurance- Creator: Writing “Legal News Update by Lomash”, a weekly newsletter (965+ subscribers) where I break down complex legal and policy changes into plain, actionable language for operators, founders and lawyers- Ecosystem ally: Supporting founders as Venture Partner at Soonicorn Ventures, especially on early-stage compliance strategy, data protection, and riskI’m particularly interested in- DPDP, data protection and global privacy (DCDPO certified)- Client audits, vendor infosec and building audit-resilient organisations- How law, fintech and product intersect in India’s startup ecosystemIf you’re a founder, operator or investor thinking about audits, DPDP or regulatory strategy, I’m always happy to jam on real problems. Feel free to reach out for a quick conversation or subscribe to the newsletter.

Experience

1. Senior Manager Data Protection

   Yubi

   Jun 2024 — Present · Mumbai, IN

   Led 100+ end‑to‑end client audits (onboarding, annual, vendor, TPRM), consistently securing strong outcomes with global banks, NBFCs and large enterprises.Designed and built Yubi’s Trustsphere tool, using AI to cut audit response cycles from weeks to 1–2 days and, in many cases, to just a few hours.Lead DPDP implementation at Yubi, including DPIAs, RoPA, data‑flow diagrams and processing records, and have been instrumental in rolling out DAM solutions across the organisation.Draft and maintain core privacy artefacts including privacy policy, cookies policy and related disclosures that withstand client and regulatory scrutiny.Built and scaled internal audit‑response playbooks, reducing effort and coordination overhead across sales, legal, infosec and product teams.Partner with GTM and product teams to translate regulatory requirements into features, documentation and customer‑ready narratives that unlock and retain B2B business.

Education

• Sainik School, Rewa

  Higher Secondary Studies, Higher Secondary Education

  2008 — 2010

• UPES

  Integrated BA LLB (Honors) with Specialization in Energy Laws, Energy, Environment, and Natural Resources Law

  2011 — 2016

Skills

• Legal Research Skills
• Corporate Law
• Legal Assistance
• Criminal Law
• Research
• Constitutional Rights
• Constitutional Law
• Legal Research
• Trademarks
• Family Law
• Westlaw
• Intellectual Property
• Environmental Law
• Arbitration
• Legal Writing
• International Law
• Consumer Protection Act
• Consumer Law