Privacy Counsel, APAC

Aon Hewitt; Kuala Lumpur; Hybrid; MYR 150,000 - 200,000; Full time

Job summary

An established industry player is seeking a Privacy Counsel to join their dynamic team in Kuala Lumpur. This hybrid role offers the opportunity to work both remotely and in the office, providing legal expertise on privacy law matters across the Asia-Pacific region. The successful candidate will manage compliance, collaborate with various stakeholders, and lead initiatives to mitigate privacy risks. With a focus on privacy and data protection, this role is perfect for those passionate about legal compliance and eager to make a significant impact within a diverse team. Join this innovative firm and help shape its approach to privacy obligations globally.

Qualifications

• 3-5 years of experience in privacy and data protection law.
• CIPP certified or equivalent knowledge is required.
• Experience with commercial agreements and privacy provisions.

Responsibilities

• Manage compliance with privacy statutes and regulations across APAC.
• Draft and negotiate privacy language for client and supplier agreements.
• Provide privacy training and maintain awareness of privacy obligations.

Skills

Privacy and Data Protection Law

CIPP Certification

Contract Drafting and Negotiation

OneTrust Experience

Regulatory Compliance

Project Management

Education

Law Degree

Tools

OneTrust

Job description

Privacy Counsel, APAC

We're hiring! We are looking for a Privacy Counsel, APC to join our team in KL, Malaysia. This is a hybrid role with the flexibility to work both virtually and from the office.

The Privacy Counsel, APAC will provide day to day legal expertise and support to the business across APAC on a wide range of privacy law matters.

You will proactively manage compliance with privacy statutes and regulations. The scope of the work will require the successful candidate to collaborate with various levels of management and staff, data privacy regulators, legal department peers, and outside counsel. Working closely with members of Aon’s Global Privacy Office (GPO), the Privacy Counsel, APAC will provide support for new and existing projects and initiatives.

What the day will look like

The Privacy Counsel, APAC responsibilities include:

• Work with commercial teams to ensure client contracts and agreements with suppliers or third parties comply with all relevant privacy laws.
• Draft, review, and negotiate privacy and data protection language for Aon’s client, supplier, and third-party agreements.
• Work collaboratively within the OneTrust system to review initiatives for compliance with privacy laws, conduct privacy impact assessments and develop solutions that address privacy risks.
• Advise on data privacy incidents; provide legal counsel on notification obligations, best standards for communication. Lead regulatory interactions.
• Establish and maintain excellent working relationships with members of the business and work proactively with them to identify, mitigate and address privacy risks.
• Work closely with the relevant Asia-Pacific stakeholders in assisting business and shared services teams in responding to requests from individuals with common rights under the applicable data protection with respect to their personal information.
• Help support projects crafted to maintain privacy compliance and to maintain awareness throughout the organization of Aon’s approach to privacy and dedication to its privacy obligations globally.
• Provide regular privacy training and communications to Aon business and shared services teams within the Asia-Pacific region.
• Keep abreast of regulatory developments. Analyze existing and new legislative and regulatory developments to ensure that Aon understands and aligns with evolving requirements.
• Support the APAC Privacy Counsel Lead in carrying out her expanded role as the DPO of Aon SG.

Skills and experience that will lead to success

• 3-5 years relevant experience with a focus in privacy and data protection law and regulation, especially the China data protection laws (Data Security Law, Cybersecurity Law and Personal Information Protection Law), Hong Kong Personal Data Protection (Privacy Ordinance), India Information Technology Act, Indonesia Personal Data Protection Law, Japan Act on the Protection of Personal Information, Malaysia Personal Data Protection Act 2010, Macau Personal Data Protection Law, Philippines Data Privacy Act of 2012, Singapore Personal Data Protection Act 2012, South Korea Personal Information Protection Act, Thailand Personal Data Protection Act 2019, Taiwan Personal Data Protection Act 2010, Vietnam data protection laws (Decree on Personal Data Law Protection, Network Information Security No. 86/2015/QH13 and the Law on Cybersecurity (No. 24/2018QH14), Australian federal Privacy Act, the Australian Privacy Principles, Prudential Standards, Prudential Standard CPS 234 Information Security (CPS 234), and the New Zealand Privacy Act 2020 and its Information Privacy Principles.
• CIPP certified, or ability to demonstrate equivalent knowledge.
• Experience drafting, reviewing, and negotiating commercial agreements, especially privacy and data protection provisions and addendum.
• Experience working with OneTrust preferred.
• Experience with interpreting and implementing privacy programs.
• You are self-motivated and possess the ability to learn quickly, identify and resolve legal and business issues, drive projects and earn the confidence of the partners you work with.
• You can work independently but also like to be part of a diverse team.