Role Introduction
The Privacy, Data and Artificial Intelligence Legal Counsel sits under our Group Legal and Compliance Department, mainly responsible for supporting the Data Protection Officer team of Cathay Group to ensure compliance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the European Union General Data Protection Regulation (GDPR), the Personal Information Protection Law (PIPL) and other relevant data protection laws across all regions in which the Cathay Group operates.
This is a great opportunity for a driven, motivated and hard-working individual to be part of a team with responsibility for a global data privacy compliance program and its implementation in practice. This role will give the successful candidate the opportunity to work in a fast-moving and cutting-edge field, within an exciting and multifaceted airline business. The successful candidate will work out of Cathay Group’s offices in Hong Kong, and will work closely with a wide range of Cathay Group business units, including Procurement, Information Technology, Digital, and People.
Key Responsibilities
- Monitor compliance with the European Union General Data Protection Regulation (GDPR), the Hong Kong Personal Data (Privacy) Ordinance (PDPO), Personal Information Protection Law (PIPL) and other relevant data protection laws and engage with internal stakeholders to provide advice on data protection matters
- Provide advice on privacy impact assessments, including on when they are required, what methodology to follow, identifying key privacy risks and suggesting mitigation actions in compliance with relevant data protection laws
- Independently draft, review, and negotiate data protection-related contracts or clauses (e.g. Data Protection Addendums), as requested by the Data Protection Officer
- Manage the development, and management of internal data protection-related policies and compliance processes
- Independently investigate and follow up on potential privacy incidents, as requested by the Data Protection Officer
- Independently coordinate responses to individual rights requests (e.g. access, deletion, rectification) and law enforcement requests, as requested by the Data Protection Officer
- Promote strong data protection standards through conducting training and awareness sessions to various Business Units and Outports
- Manage third-party privacy risk related procedures, including to independently review and assess responses provided by third parties through pre-onboarding questionnaires, as well as alerts provided by the pre-onboarding screening system
- Require legal expertise to make legal interpretations to translate a requirement into operational processes or controls, draft legal documents (for example privacy notices, contracts, responses to regulators and other authorities), negotiate contracts
Requirements
- A proven interest in global data protection laws and practices, with a focus on Hong Kong Personal Data (Privacy) Ordinance (PDPO), General Data Protection Regulation (GDPR), Personal Information Protection Law (PIPL) and other relevant data protection laws in which Cathay Group operates, and a strong desire to learn how these regimes relate to both customer and employee personal data
- 5+ year Post-Qualification Experience data protection lawyer with experience gained in a reputable law firm. In-house experience in an organisation that has substantial personal data operations is preferred
- High proficiency in office applications (including Word, PowerPoint and Excel)
- Fluent spoken and written English, Cantonese and Putonghua
- Experience in using OneTrust and / or other privacy management software is advantageous
- Excellent communication and presentation skills and ability to interact with a wide range of stakeholders
- High attention to detail, and able to see and understand the bigger pictures
- Extremely well organised and good at planning and managing his/her time as well as others; and ability to work flexibly and on multiple tasks
- Mature and has a high sense of responsibility and accountability for their work
- Excellent team player and able to work with people at all levels across the organisation
Personal & Application Information
Cathay Pacific is an Equal Opportunities Employer. Personal data provided by job applicants will be used strictly in accordance with our Applicant Personal Information Collection Statement and for recruitment purposes only. Candidates not notified within eight weeks may consider their application unsuccessful. We keep records of your data for no longer than is necessary for the purpose for which we obtained them and any other permitted linked purposes. If your application is unsuccessful, we will keep your details on file for as long as is necessary to process your application or for the purposes of further job opportunities if you agree to such longer periods.
