We are looking for an experienced Data Protection Specialist to join our highly-regarded in-house legal team at PwC. The candidate will be based in Hong Kong SAR. Within this role you will be responsible for supporting and implementing all aspects of the firm’s data matters, including personal data compliance strategy, data incident response, data related contractual review and negotiations with external parties and advice on all other legal matters surrounding data matters.

• Privacy & Data Compliance - reviewing firm-wide activities and business with external parties, and providing expert legal advice on local and international data protection rules including GDPR, PDPO, and other relevant regulations, so to ensure they are in compliance with relevant data and privacy laws as well as internal policies.

• Data Contracting -- Drafting, reviewing and negotiating the data clauses and/or data protection documents of global and local commercial contracts with external clients, vendors and other parties. This would mean gaining a good understanding of various business lines and services that PwC offers, and working closely with internal risk management as well as business teams where needed.

• Personal data matters - Handling data subject request, government authority enquiries, data incidents and issues relating to legislation and practices relating to personal data of the firm and external parties.

• Policies and templates – Collaborating and training internal business units including IT, compliance and others to ensure compliance with relevant policies, and updating the data related policies and templates as needed.

• Data innovation & projects - Providing business-oriented solutions and advice on data issues to the team for new business or technology; handling the cross-border data projects and advising on global initiatives in relation to data and cybersecurity.

• Privacy impact assessments - Conducting privacy impact assessments on technology initiatives and other events or projects. This includes partnering with all business and functional areas, to ensure data privacy issues are considered at the outset of these initiatives.

• Legal research – Monitoring the regulatory landscape to keep visibility on legal developments and best practices related to privacy, data and relevant commercial contracting matters; helping identify gaps in legal compliance in those areas; conducting solid legal research in those regards and drafting legal memos as required to support OGC leaders’ work.

Key Requirements:

• HK lawyer qualification with 5-8 years of post-qualification experience.
• Currently practising and specialised in data protection/general corporate with a top law firm or legal department of a leading multinational company.
• A good knowledge of and relevant practice on data protection laws of Hong Kong, the Chinese Mainland, EU and other major jurisdictions worldwide.
• Experience advising on AI and IP/IT regulations is a plus.
• LLM degree or above; Holding privacy and AI-related certifications (e.g. CIPM, CIPP, AIGP) will be preferred.
• Full professional proficiency in English with excellent written and spoken ability.
• Good spoken and written Cantonese and Putonghua is an advantage.
• Excellent communication and presentation skills and able to interact with Senior Management with polished interpersonal skills.

The PwC China (including Mainland China, Hong Kong, Macau) does not accept unsolicited resumes from search firm recruiters.

Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired;

such resumes will be deemed the sole property of PwC China (including Mainland China, Hong Kong, Macau).

PwC China (including Mainland China, Hong Kong, Macau) is an equal opportunity employer.

All aspects of employment will be based on merit, competence, performance, and business needs.

We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under the local law.