
Senior Privacy, Data
4 days ago
Senior Privacy, Data & AI Compliance Legal Counsel
Cathay Pacific
Financial & Legal Services
Group Legal and Compliance Department
Permanent
Hong Kong SAR (China)
Role IntroductionReports to: Associate General Counsel – Privacy, Data & AI Compliance - Data Protection Officer
The Group Legal and Compliance (GLC) department handles a range of commercial, corporate, employment law, data privacy, competition law and regulatory matters. We also develop and implement Cathay’s compliance policies and programmes, including competition, anti-bribery, sanctions and data privacy.
As the Senior Privacy, Data & AI Compliance Legal Counsel, you will be part of a team which supports the Associate General Counsel – Privacy, Data & AI Compliance – DPO to inform and advise the Cathay Pacific Group, including its Privacy and Data Protection Regulations (e.g. Hong Kong Personal Data (Privacy) Ordinance (PDPO), Mainland China’s Personal Information Protection Law (PIPL), and the EU General Data Protection Regulation (GDPR)); the Artificial Intelligence Laws (e.g. EU AI Act and Mainland China’s Interim Measures for the Management of Generative AI Services); and Data Security Regulations (e.g. the HK Protection of Critical Infrastructure (Computer System) Regulation, the Data Security Law of the PRC), altogether referred in this document as “Data Laws”.
Key Responsibilities- Support the Associate General Counsel – Privacy, Data & AI Compliance - Data Protection Officer on the development, implementation and management of the frameworks to comply with the Privacy & Data Protection and Artificial Intelligence Laws
- Manage Cathay’s Incident Response processes (i.e. Personal Data and AI), including its investigation, internal and external reporting, and advise on the implementation of controls to prevent a recurrence; develop and keep updated the Data Protection Addendum (DPA) template and AI compliance clauses and advise on its negotiation and execution
- Manage the relevant process for the timely response to privacy-related individuals’ rights requests (e.g. access, deletion, rectification, etc); as well as oversight the response to data access requirements from law enforcement and other competent authorities (e.g. Police, Immigration, Tax, Securities, etc.)
- Manage and support Cathay’s Business Units on the execution of assessments to comply with the Data Laws, including Privacy Impact Assessment, Legitimate Interest Assessment, Transfer Impact Assessments, AI Impact Assessments, and advise based on the outcome of such exercises
- Support the Associate General Counsel – Privacy, Data & AI Compliance - Data Protection Officer to manage the Cathay Record Retention and Management Policy and the Cathay Data Classification Policy; and keeping the relevant Steering Committees and senior management abreast of the status of Cathay’s obligations under the Data Laws
- Advise IT Risk & Security and other relevant Business Units regarding Cathay’s obligations established on Data Security regulations, including for example, the Hong Kong Protection of Critical Infrastructure (Computer System) Regulation, the Data Security Law of the PRC
- Develop, rollout and keep updated the training modules and awareness communications to keep updated Cathay Pacific Group regarding its obligations under the Data Laws (e.g. general awareness e-modules, role-based trainings, etc.)
- Periodically monitor the appropriate implementation of controls to comply with the Data Laws. Coordinate, in relation to the above responsibilities with other key teams within Cathay Pacific Group, including IMT, People and Digital; and
- Require legal expertise to make legal interpretations to translate a requirement into operational processes/controls, draft legal documents (e.g., privacy notices, contracts, responses to regulators and other authorities, etc.), negotiating contracts, etc.
- A good knowledge of Hong Kong, the Chinese Mainland, and European data protection laws and practices, and a good understanding of how these regimes relate to both customer and employee personal data. Deep understanding of other privacy and data protection regimes (e.g. Singapore, US) would be an advantage
- Experience advising on AI and data security regulations is preferred
- Law degree with 8+ years of experience specializing in data protection and privacy and holding privacy and AI-related certifications (e.g. CIPM, CIPP, AIGP) will be considered as Privacy, Data & AI Compliance Manager OR an 8+ year post qualification experience lawyer with experience in privacy and/or AI matters gained in a reputable law firm will be considered as Senior Legal Counsel. In-house experience in an organization that has substantial data operations is preferred
- Experience of promoting a data protection culture in a large organisation, and dealing with issues relating to both customer and employee data
- High proficiency in office applications (including Word, PowerPoint, Excel and SharePoint). Experience in using OneTrust and / or other privacy management software is advantageous
- Fluent spoken and written English. Good spoken and written Cantonese and Putonghua is an advantage. Excellent communication and presentation skills and able to interact with Senior Management with polished interpersonal skills
- Able to work and solve problems independently with minimum supervision. High attention to detail, and able to see and understand the bigger picture
- Extremely well organised and good at planning and managing his/her time as well as others. Mature and has a high sense of responsibility and accountability for their work
- Ability to work flexibly and on multiple tasks and able to work with minimal supervision and guidance
- Excellent team player and able to work with people at all levels across the organisation
Cathay Pacific is an Equal Opportunities Employer. Personal data provided by job applicants will be used strictly in accordance with our "Applicant Personal Information Collection Statement" and for recruitment purposes only. Candidates not notified within eight weeks may consider their application unsuccessful. We keep records of your data for no longer than is necessary for the purpose for which we obtained them and any other permitted linked purposes. If your application is unsuccessful, we will keep your details on file for as long as is necessary to process your application or for the purposes of further job opportunities if you agree to such longer periods.
#J-18808-Ljbffr-
Privacy Counsel
4 days ago
Singapur, Singapore Ant International Full timeAnt International’s Alipay+ business is seeking a Privacy Counsel to play a critical role in shaping our data protection and compliance strategy across APAC and beyond. This position is ideal for a privacy lawyer who is passionate about data, comfortable working at the intersection of law and technology, and eager to influence innovative fintech products...
-
Executive (Data Protection & Privacy)
4 days ago
Singapur, Singapore Dynamic Human Capital Pte Ltd Full timeAbout the Role We are seeking a dedicated and proactive professional to join our team. In this role, you will play a key part in strengthening our organisation’s data protection and privacy framework, ensuring compliance with national legislation and internal policies. Key Responsibilities Implement, monitor, and track compliance with data protection...
-
APAC Senior Privacy Counsel
4 days ago
Singapur, Singapore Apple Inc. Full timeImagine what you could do here. At Apple, new ideas have a way of becoming great products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish.The people here at Apple don’t just build products — they build the kind of wonder that’s revolutionised entire industries....
-
Product Manager, User Data
4 days ago
Singapur, Singapore TikTok Full timeProduct Manager, User Data & Privacy Experience The TikTok Privacy & Responsibility Product division's goal is to meet all of our privacy, responsibility, and compliance requirements, while providing the best user experience to responsibly consume, create, and enjoy content on TikTok. We focus on building infrastructure and user-facing tools that uphold...
-
Privacy Counsel Greater Asia
4 days ago
Singapur, Singapore BD Full timeJoin to apply for the Privacy Counsel Greater Asia role at BD 1 day ago Be among the first 25 applicants Join to apply for the Privacy Counsel Greater Asia role at BD Get AI-powered advice on this job and more exclusive features. We are the makers of possibleBD is one of the largest global medical technology companies in the world. Advancing the world of...
-
Legal Counsel, Privacy Fintech
4 days ago
Singapur, Singapore Booking Holdings, Inc. Full timeOverview About Us: At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. We’re the thrill of the first night in a new place. The journeys you take. Through our products, partners and people, we make it easier for everyone to experience the world. Role Description: Booking.com is currently looking for a Legal...
-
Privacy Advocacy Specialist
4 days ago
Singapur, Singapore TikTok Full timeResponsibilities Overview PDPO (Privacy and Data Protection Office) leads and empowers TikTok's privacy efforts, advising across the company on safeguards and technical mitigations to protect users’ privacy across TikTok’s products and platforms. We are seeking a highly motivated Advocacy Specialist to advance the organization’s reputation as a privacy...
-
Compliance Lead
4 days ago
Singapur, Singapore Capital Group Full timeJoin to apply for the Compliance Lead - Technology, InfoSec & Privacy role at Capital Group Join to apply for the Compliance Lead - Technology, InfoSec & Privacy role at Capital Group Get AI-powered advice on this job and more exclusive features. “I can succeed as a Compliance Lead at Capital Group.”As a Technology, Infosec and Privacy Compliance...
-
Consulting Lawyer
4 days ago
Singapur, Singapore Peerpoint Full timeOverview Consulting Lawyer - Commercial and Data Privacy - Peerpoint Panel. Peerpoint by A&O Shearman is a global platform for self-directed consultant lawyers. Ours is a new way to amplify your talents and ambitions whilst accessing the best work, clients, support, resources (including PI insurance) and earning potential. To find out more, please visit We...
-
Privacy Counsel Greater Asia
4 days ago
Singapur, Singapore BD Mexico Full timeJob Description Summary Job Description We are the makers of possible BD is one of the largest global medical technology companies in the world. Advancing the world of health is our Purpose, and it is no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech...