Area                                                                                        Global Privacy

Department                                                                                   Global Legal

Direct Reporting Line                                                            Global Privacy Officer

Indirect/secondary reporting line                                             General Counsel APAC & GCA

Subsidiary/country                                                                       China

Location                                                                                                 Shanghai

GSMS Grade                                                                                          M2

Number of Personnel Managed                                                  n/a

Cost Center/Budget and/or Revenue Responsibility               

Purpose & Overall Relevance for the Organization:

The Director Global Privacy is tasked with leading most complex and privacy risk involving or privacy risk mitigating multi-country activities within the markets of Greater China (GCA) and Asia Pacific (hereinafter jointly referred to as “the region”). Reporting into the Global Privacy Officer, they are tasked to represent Global Privacy in the region driving the implementation of the adidas Global Privacy Framework and to support the GCA and APAC legal and privacy community to ensure consistency with the Global Privacy Framework. They coordinate and execute independently throughout all phases of an assigned activity and ensure appropriate quality, documentation, and communication. The Director Global Privacy APC & GCA provides lateral leadership and guidance for other stakeholders (Global Legal, InfoSec & business) in the region on their privacy related responsibilities as well gives input and support for the maintenance and further enhancement of the Global Privacy Framework. The role entails close interaction with the China Digital Hub.

Key Responsibilities:

• Assurance of data protection impact assessments (DPIAs): Be responsible for the completion of necessary DPIAs or privacy impact assessment for cross-country initiatives in GCA and APAC. Contribute to DPIAs or privacy impact assessments for global projects by coordinating necessary input from key countries in the region.
• Operate the regional privacy risk management process: Be responsible for the application of the global privacy risk management process within GCA and APAC and ensure the business’ commitment for risk ownership and risk mitigation. Maintain the regional privacy risk register, follow-up on risk mitigation, and ensure risks are reported to the Global Privacy Officer.
• Coordinate the regional and local adaption of the personal data breach notification process: Be responsible to drive and facilitate the effective application of the global personal data breach management process within GCA and APAC and ensure effective coordination among necessary functions at global as well as at regional and market level (e.g. Information Security).
• Handling of external complaints: Effectively support the resolution of complaints submitted by data protection authorities or similar administrative bodies and act as a representative of adidas in the area of privacy and data protection within GCA and APAC as appropriate and as prior agreed upon with the Global Privacy Officer and the General Counsel for GCA and APAC.
• Engage in privacy training and awareness: Contribute to the establishment of the training and awareness framework and the annual privacy training plan. Coordinate the creation of supplementary training and awareness content for the region. Provide training and awareness activities to senior and executive management level audiences. Ensure appropriate documentation of assigned training activities.
• Manage internal projects: Identify - and coordinate delivery of assigned - projects to create, implement, maintain, and enhance the Global Privacy Framework (e.g. policies, processes, standards, etc.) for GCA and APAC. Coordinate external project managers or subject matter experts as appropriate and agreed upon with the Global Privacy Officer.
• Support the Global Privacy Officer: Represent Global Privacy and their strategic objectives in GCA and APAC, e.g. through the identification of priorities for Global Privacy in the region by closely monitoring the legislative and regulatory landscape in regards of privacy and data protection, cyber security and associated legal areas, narrowly following the development of adidas business activities and privacy impact associated to it, contribute to the creation of management reports, and regularly interface with the Global Legal teams in the region to provide education and update on the Global Privacy Framework and deriving responsibilities.
• Leadership: Convert the adidas leadership principles into efficient lateral leadership focusing on cross functional collaboration across all business areas as well as on creativity and flexibility when providing advice.

Key Relationships:

• Global Privacy Department
• Global Legal GCA& APAC
• Global Legal Digital
• Wider Global Privacy Community
• Senior & executive management in GCA and APAC
• Information Security GCA and APAC
• China Digital Hub leadership team
• External counsel and/or consultants
• Suppliers

Knowledge, Skills and Abilities:

• Excellent communication skills including communication on executive level
• Acknowledge the strategic importance of information technology based on a deep information technology understanding
• Ability to prioritize and guide others prioritizing
• Integrity

Requisite Education and Experience / Minimum Qualifications:

• 10+ years of related working experience
• 3+ years of lateral or people management experience
• Proven expertise in the area of privacy and the digital business; e.g., through previous roles
• Confidence in communicating with senior and executive management level
• Working experience in complex multi-national environments
• Fully qualified lawyer (Master’s degree in law or equivalent & eligible for bar admission) / alternatively master’s degree or equivalent in a relevant area together with proven ability to master legal privacy issues
• Relevant domestic or international privacy certification (CIPP/x, CIPM, etc.)

Signed by (name, signature):                             __________________ __________________

Received by (Name, Unterschrift):                  __________________ __________________

Effective (date):                                                       __________________