Group Function - Privacy Legal Counsel

NetEase; Hong Kong; On-site; HKD 600,000 - 800,000; Full time

Job summary

NetEase in Hong Kong is seeking a mid-level Group Privacy Legal Counsel with 4–8 years of experience to manage global privacy compliance and data risks. You will support cross-functional teams and ensure compliance with emerging regulations.

The ideal candidate will be a qualified lawyer with a solid grasp of privacy issues, fluency in English and Mandarin, and experience in a mix of law firm and corporate environments. This position promotes a dynamic work culture.

Qualifications

• 4 to 8 years of legal practice focused on privacy and data protection.
• Experience with cybersecurity and emerging technologies.
• Fluency in English and Mandarin Chinese.

Responsibilities

• Maintain global privacy policies and frameworks.
• Implement privacy principles in product lifecycles.
• Conduct Data Protection Impact Assessments (DPIAs).
• Draft and review Data Processing Agreements (DPAs).
• Investigate cybersecurity incidents.

Skills

Legal counseling

Privacy compliance

Risk assessment

Contract negotiation

Employee training

Regulatory monitoring

Education

Qualified lawyer in U.S., Hong Kong, Singapore, UK and/or Canada

Job description

NetEase, Inc. (Nasdaq: NTES and HKEX: 9999) is a global powerhouse in the Internet and online game industry, with a market capitalization of $80+ billion and more than 25,000 employees worldwide. The NetEase group encompasses a range of innovative businesses centered around content creation, including:

NetEase Games, one of the largest and most renowned game developers worldwide by size, revenue and game offerings. Over the years, NetEase Games has focused on developing high quality content and providing the best experience for gamers around the world;

• Youdao (NYSE: DAO), a majority-controlled subsidiary of NetEase, Inc. and China’s leading technology-focused intelligent learning company;
• Cloud Music (HKEX: 9899), a majority-controlled subsidiary of NetEase, Inc. and China’s leading online music content community;
• Yanxuan, NetEase’s private label consumer lifestyle brand; and
• Other innovative businesses, including, among others, an online payment platform and to-B AI technology solutions provider.

About this Role

We are seeking a mid-level Group Privacy Legal Counsel with 4–8 years of experience to join our legal team. You will manage global privacy compliance, mitigate data risks, and support cross‑functional teams on privacy‑by‑design initiatives, reporting to NetEase’s Head of Privacy & Data Protection. You will also support cybersecurity risk management and compliance with emerging AI regulations and related matters.

This position is part of the Group International Legal department which oversees legal matters for the NetEase group (ex‑China) and coordinates with the legal teams within each division of the group.

Responsibilities

• Compliance Management: Maintain and update global privacy policies, notices, and internal frameworks for our global business units, including online games, music streaming, e‑commerce, e‑sports, intelligent learning, and others.
• Product Counseling: Work with product and engineering teams to implement privacy‑by‑design and privacy‑by‑default and responsible AI principles into product lifecycles.
• Risk Assessments: Provide legal guidance on cross‑border data transfers and data localization requirements and conduct, review, and document Data Protection Impact Assessments (DPIAs).
• Contract Management: Draft, negotiate, and review Data Processing Agreements (DPAs) as well as the data privacy‑related provisions in a wide range of commercial agreements with third parties, including IP licensing and software co‑development agreements.
• Incident Response: Investigate potential data/cybersecurity incidents and manage regulatory notification obligations.
• Employee Training: Design and deliver privacy and AI awareness training across global offices.
• Regulatory Monitoring: Track emerging privacy and AI laws (e.g., GDPR, CCPA/CPRA, EU AI Act, EU Digital Services Act, local regulations) and update frameworks.
• Outside Counsel: Collaborate and coordinate with outside counsel across various jurisdictions.
• Other: Take on other relevant duties as assigned and commensurate with your ability.

Requirements

• Qualification: Qualified lawyer in the U.S., Hong Kong, Singapore, UK and/or Canada.
• Experience: 4 to 8 years of legal practice focused on privacy and data protection, cybersecurity and emerging technologies.
• Industry Background: Mix of major law firm training and in‑house corporate experience preferred.
• Tech Literacy: Understanding of data flows and mapping, cloud computing, and modern IT architecture, and familiarity or interest in the interactive entertainment industry in general.
• Languages: Fluency in English and Mandarin Chinese.
• Location: Preferably Hong Kong or Singapore.

Preferred Skills & Certifications

• Certifications: CIPP/E, CIPP/US, or CIPM designations are highly desirable.
• Self‑starter: Demonstrates high self‑initiative and can work with teams to drive projects to pragmatic solutions.
• Communication: Ability to translate complex legal requirements into actionable business advice.
• Dynamic Work Environment: Growth mindset that can thrive in a dynamic, cross‑border environment, while working effectively across different disciplines, cultures, and time zones.