Legal Counsel - Manager - Data Protection - Office - Office of General Counsel Generalist - Manager

Job Req ID: 37671

Date: 6 May 2025

Country/Region: HK

City: Hong Kong

Job Profile Summary

We are looking for an experienced Data Protection Specialist to join our highly-regarded in-house legal team at PwC.

The candidate will be based in Hong Kong SAR. Within this role you will be responsible for supporting and implementing all aspects of the firm’s data matters, including personal data compliance strategy, data incident response, data related contractual review and negotiations with external parties and advice on all other legal matters surrounding data matters.

Privacy & Data Compliance - reviewing firm-wide activities and business with external parties, and providing expert legal advice on local and international data protection rules including GDPR, PDPO, and other relevant regulations, so to ensure they are in compliance with relevant data and privacy laws as well as internal policies.

Data Contracting -- Drafting, reviewing and negotiating the data clauses and/or data protection documents of global and local commercial contracts with external clients, vendors and other parties. This would mean gaining a good understanding of various business lines and services that PwC offers, and working closely with internal risk management as well as business teams where needed.

Personal data matters - Handling data subject request, government authority enquiries, data incidents and issues relating to legislation and practices relating to personal data of the firm and external parties.

Policies and templates – Collaborating and training internal business units including IT, compliance and others to ensure compliance with relevant policies, and updating the data related policies and templates as needed.

Data innovation & projects - Providing business-oriented solutions and advice on data issues to the team for new business or technology; handling the cross-border data projects and advising on global initiatives in relation to data and cybersecurity.
Privacy impact assessments - Conducting privacy impact assessments on technology initiatives and other events or projects. This includes partnering with all business and functional areas, to ensure data privacy issues are considered at the outset of these initiatives

Job Description

Key Requirements:
HK lawyer qualification with 5-8 years of post-qualification experience.
Currently practising and specialised in data protection/general corporate with a top law firm or legal department of a leading multinational company.
A good knowledge of and relevant practice on data protection laws of Hong Kong, the Chinese Mainland, EU and other major jurisdictions worldwide.
Experience advising on AI and IP/IT regulations is a plus.
LLM degree or above; Holding privacy and AI-related certifications (e.g. CIPM, CIPP, AIGP) will be preferred.
Full professional proficiency in English with excellent written and spoken ability.
Good spoken and written Cantonese and Putonghua is an advantage.
Excellent communication and presentation skills and able to interact with Senior Management with polished interpersonal skills.