Search jobs now Submit your resume Create a job alert Explore how we help jobseekers Contract talent Permanent talent Project and interim management Learn how we work with you Finance and accounting Financial services Technology Supply chain Technology Risk, Audit and Compliance Finance and Accounting Digital, Marketing and Customer Experience Legal Operations Human Resources 2026 Salary Guide Robert Half blog Career development Management tips Hiring help Land that job Research & insights Browse jobs Find your next hire Our locations
Data Privacy Counsel - luxury retail
<p><span style="text-decoration: underline;"><strong>About the Company</strong></span></p><p>Our client is a <strong>prestigious global luxury maison</strong> with a strong heritage and a significant presence in Greater China. The brand operates through multiple retail channels, e‑commerce platforms, and CRM systems, managing millions of consumer interactions across the region.</p><p>With the rapid evolution of data protection, cybersecurity, and AI regulations in China, the company is committed to embedding <strong>privacy by design</strong> into its business operations. The legal and compliance function plays a critical role in ensuring that the brand's regional activities are fully aligned with local regulatory requirements while maintaining the highest standards of consumer trust and brand integrity.</p><p><span style="text-decoration: underline;"><strong>The Role</strong></span></p><p>We are seeking a <strong>Data Privacy Counsel</strong> to join the brand's Greater China legal/compliance team. This is a <strong>high‑visibility, hands‑on role</strong> reporting to the Greater China DPO, with a primary focus on operationalizing data protection and privacy compliance across the region's business units.</p><p>You will work cross‑functionally with IT, Marketing, HR, Retail, Digital, CRM, and other key stakeholder teams to ensure that data processing activities are compliant with <strong>PIPL, DSL, CSL, and emerging AI‑related regulations</strong>. This is not a pure advisory role - you will be expected to <strong>lead DPIA, draft policies, manage incidents, and drive remediation</strong> in a fast‑paced commercial environment.</p><p><span style="text-decoration: underline;"><strong>Key Responsibilities</strong></span></p><ol><li><strong>Privacy Compliance &amp; Advisory</strong></li></ol><ul><li>Provide privacy feasibility assessments and compliance consulting for business projects</li><li>Lead <strong>Data Protection Impact Assessments (DPIA)</strong> and track remediation actions to closure</li><li>Monitor compliance with <strong>PIPL, DSL, CSL, and AI‑related laws</strong>, and advise business units on practical implications</li></ul><ol start="2"><li><strong>Policy &amp; Documentation</strong></li></ol><ul><li>Draft, review, and revise internal data protection policies, procedures, data processing agreements, and privacy policies</li><li>Support the regional roll‑out of group‑level data protection initiatives and localize them for Greater China</li><li>Maintain the <strong>Record of Processing Activities (ROPA)</strong> and report compliance status to management</li></ul><ol start="3"><li><strong>Incident Management &amp; Training</strong></li></ol><ul><li>Manage data breaches in coordination with IT Security and implement remediation actions per the incident response plan</li><li>Coordinate breach notifications as required under applicable laws</li><li>Assist in delivering privacy compliance training to business teams to raise awareness</li></ul><ol start="4"><li><strong>Regulatory Monitoring &amp; Reporting</strong></li></ol><ul><li>Track regulatory developments in personal information protection, data security, cybersecurity, and AI‑related laws</li><li>Prepare legal analysis and reports for committee meetings to keep senior management informed of evolving obligations and risks</li><li>Act as the contact point for data subjects regarding the exercise of their rights</li></ul><ol start="5"><li><strong>Cross‑functional Coordination</strong></li></ol><ul><li>Serve as the privacy liaison with functional teams across Greater China, including IT, Marketing, HR, Retail, Digital, and CRM</li><li>Support the DPO in legal research on specific data‑related issues and provide actionable recommendations</li></ul><p> </p><p><strong>Education &amp; Qualifications</strong></p><ul><li>Bachelor's degree or above in Law (preferred)</li><li><strong>CIPP/CN, CIPP/E, or CIPM</strong> certifications are a strong plus</li></ul><p><strong>Experience</strong></p><ul><li><strong>3+ years</strong> of experience specializing in data protection and privacy, either from:</li><ul><li>A law firm with a strong data/privacy practice; or</li><li>An in‑house legal/compliance function at a multinational company (luxury, retail, or consumer goods experience is a plus)</li></ul><li>Solid experience in <strong>DPIA, cross‑border data transfers, data breach management, and policy drafting</strong></li><li>Familiarity with <strong>CRM systems, IT data flows, and AI applications</strong> is a distinct advantage</li></ul><p><strong>Skills</strong></p><ul><li><strong>Fluent in Chinese and English</strong> (both written and spoken) - you will be working with HQ stakeholders and reviewing global policies</li><li>Strong legal research and drafting skills</li><li>Solid understanding of <strong>PIPL, DSL, CSL, and emerging AI‑related regulations</strong></li><li>High sense of responsibility, ownership, and accountability</li></ul><p><strong>Personal Attributes</strong></p><ul><li>Self‑motivated and quick to learn - able to work independently</li><li>Excellent team player with strong interpersonal skills, capable of working with stakeholders at all levels across the organization</li><li>Pragmatic and business‑oriented - able to translate legal requirements into practical solutions</li></ul><p><strong>What We Offer</strong></p><ul><li>Competitive compensation package (base salary + performance bonus)</li><li>Exposure to a <strong>high‑profile luxury brand</strong> with complex, multi‑channel operations</li><li>Direct access to regional and global DPOs and senior leadership</li><li>Opportunity to shape the brand's privacy framework in one of the world's most dynamic regulatory environments</li><li>A collaborative, supportive team culture that values professional growth</li></ul><p><em>By clicking 'apply', you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice https://www.roberthalf.cn/en/privacy-statement. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.</em></p><hr /><p><em>点击"申请",即表示您明确同意 Robert Half 可以使用您的个人信息来处理您的工作申请,并不时与您联系以获得未来的就业机会。 如需进一步了解 Robert Half 如何处理您的个人信息以及如何访问和更正您的信息,请阅读 Robert Half 隐私声明<a href="https://nam02.safelinks.protection.outlook.com/?url=https://www.roberthalf.cn/en/privacy-statement&amp;data=05|01|[email protected]|45960615caf741a897da08db12e2448b|16532572d5674d678727f12f7bb6aed3|0|0|638124535281002861|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|3000|||&amp;sdata=txey6FkFkoVyheBOucHzeYO1yTcFywlr7N4oX7M8axY=&amp;reserved=0">https://www.roberthalf.cn/en/privacy-statement</a> 。请不要在您的简历中向我们提交任何敏感的个人数据(例如身份证号码、种族、性别、宗教、婚姻状况或工会会员身份),因为我们此时不收集您的敏感个人数据。</em></p><p> </p><p> </p><img src="https://counter.adcourier.com/d2lsbC5xaWFuLjQxMzYzLjEwOTIxQHJoaWNuLmFwbGl0cmFrLmNvbQ.gif">
  • Shanghai,
  • remote
  • Permanent
  • 400000 - 600000 CNY / Yearly
  • <p><span style="text-decoration: underline;"><strong>About the Company</strong></span></p><p>Our client is a <strong>prestigious global luxury maison</strong> with a strong heritage and a significant presence in Greater China. The brand operates through multiple retail channels, e‑commerce platforms, and CRM systems, managing millions of consumer interactions across the region.</p><p>With the rapid evolution of data protection, cybersecurity, and AI regulations in China, the company is committed to embedding <strong>privacy by design</strong> into its business operations. The legal and compliance function plays a critical role in ensuring that the brand's regional activities are fully aligned with local regulatory requirements while maintaining the highest standards of consumer trust and brand integrity.</p><p><span style="text-decoration: underline;"><strong>The Role</strong></span></p><p>We are seeking a <strong>Data Privacy Counsel</strong> to join the brand's Greater China legal/compliance team. This is a <strong>high‑visibility, hands‑on role</strong> reporting to the Greater China DPO, with a primary focus on operationalizing data protection and privacy compliance across the region's business units.</p><p>You will work cross‑functionally with IT, Marketing, HR, Retail, Digital, CRM, and other key stakeholder teams to ensure that data processing activities are compliant with <strong>PIPL, DSL, CSL, and emerging AI‑related regulations</strong>. This is not a pure advisory role - you will be expected to <strong>lead DPIA, draft policies, manage incidents, and drive remediation</strong> in a fast‑paced commercial environment.</p><p><span style="text-decoration: underline;"><strong>Key Responsibilities</strong></span></p><ol><li><strong>Privacy Compliance &amp; Advisory</strong></li></ol><ul><li>Provide privacy feasibility assessments and compliance consulting for business projects</li><li>Lead <strong>Data Protection Impact Assessments (DPIA)</strong> and track remediation actions to closure</li><li>Monitor compliance with <strong>PIPL, DSL, CSL, and AI‑related laws</strong>, and advise business units on practical implications</li></ul><ol start="2"><li><strong>Policy &amp; Documentation</strong></li></ol><ul><li>Draft, review, and revise internal data protection policies, procedures, data processing agreements, and privacy policies</li><li>Support the regional roll‑out of group‑level data protection initiatives and localize them for Greater China</li><li>Maintain the <strong>Record of Processing Activities (ROPA)</strong> and report compliance status to management</li></ul><ol start="3"><li><strong>Incident Management &amp; Training</strong></li></ol><ul><li>Manage data breaches in coordination with IT Security and implement remediation actions per the incident response plan</li><li>Coordinate breach notifications as required under applicable laws</li><li>Assist in delivering privacy compliance training to business teams to raise awareness</li></ul><ol start="4"><li><strong>Regulatory Monitoring &amp; Reporting</strong></li></ol><ul><li>Track regulatory developments in personal information protection, data security, cybersecurity, and AI‑related laws</li><li>Prepare legal analysis and reports for committee meetings to keep senior management informed of evolving obligations and risks</li><li>Act as the contact point for data subjects regarding the exercise of their rights</li></ul><ol start="5"><li><strong>Cross‑functional Coordination</strong></li></ol><ul><li>Serve as the privacy liaison with functional teams across Greater China, including IT, Marketing, HR, Retail, Digital, and CRM</li><li>Support the DPO in legal research on specific data‑related issues and provide actionable recommendations</li></ul><p> </p><p><strong>Education &amp; Qualifications</strong></p><ul><li>Bachelor's degree or above in Law (preferred)</li><li><strong>CIPP/CN, CIPP/E, or CIPM</strong> certifications are a strong plus</li></ul><p><strong>Experience</strong></p><ul><li><strong>3+ years</strong> of experience specializing in data protection and privacy, either from:</li><ul><li>A law firm with a strong data/privacy practice; or</li><li>An in‑house legal/compliance function at a multinational company (luxury, retail, or consumer goods experience is a plus)</li></ul><li>Solid experience in <strong>DPIA, cross‑border data transfers, data breach management, and policy drafting</strong></li><li>Familiarity with <strong>CRM systems, IT data flows, and AI applications</strong> is a distinct advantage</li></ul><p><strong>Skills</strong></p><ul><li><strong>Fluent in Chinese and English</strong> (both written and spoken) - you will be working with HQ stakeholders and reviewing global policies</li><li>Strong legal research and drafting skills</li><li>Solid understanding of <strong>PIPL, DSL, CSL, and emerging AI‑related regulations</strong></li><li>High sense of responsibility, ownership, and accountability</li></ul><p><strong>Personal Attributes</strong></p><ul><li>Self‑motivated and quick to learn - able to work independently</li><li>Excellent team player with strong interpersonal skills, capable of working with stakeholders at all levels across the organization</li><li>Pragmatic and business‑oriented - able to translate legal requirements into practical solutions</li></ul><p><strong>What We Offer</strong></p><ul><li>Competitive compensation package (base salary + performance bonus)</li><li>Exposure to a <strong>high‑profile luxury brand</strong> with complex, multi‑channel operations</li><li>Direct access to regional and global DPOs and senior leadership</li><li>Opportunity to shape the brand's privacy framework in one of the world's most dynamic regulatory environments</li><li>A collaborative, supportive team culture that values professional growth</li></ul><p><em>By clicking 'apply', you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice https://www.roberthalf.cn/en/privacy-statement. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.</em></p><hr /><p><em>点击"申请",即表示您明确同意 Robert Half 可以使用您的个人信息来处理您的工作申请,并不时与您联系以获得未来的就业机会。 如需进一步了解 Robert Half 如何处理您的个人信息以及如何访问和更正您的信息,请阅读 Robert Half 隐私声明<a href="https://nam02.safelinks.protection.outlook.com/?url=https://www.roberthalf.cn/en/privacy-statement&amp;data=05|01|[email protected]|45960615caf741a897da08db12e2448b|16532572d5674d678727f12f7bb6aed3|0|0|638124535281002861|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|3000|||&amp;sdata=txey6FkFkoVyheBOucHzeYO1yTcFywlr7N4oX7M8axY=&amp;reserved=0">https://www.roberthalf.cn/en/privacy-statement</a> 。请不要在您的简历中向我们提交任何敏感的个人数据(例如身份证号码、种族、性别、宗教、婚姻状况或工会会员身份),因为我们此时不收集您的敏感个人数据。</em></p><p> </p><p> </p><img src="https://counter.adcourier.com/d2lsbC5xaWFuLjQxMzYzLjEwOTIxQHJoaWNuLmFwbGl0cmFrLmNvbQ.gif">
  • 2026-08-12T09:50:55Z

Data Privacy Counsel - luxury retail Job in Shanghai | Robert Half