Group Function - Privacy Legal Counsel
About the Company： NetEase, Inc. (Nasdaq: NTES and HKEX: 9999) is a global powerhouse in the Internet and online game industry, with a market capitalization of $80+ billion and more than 25,000 employees worldwide. The NetEase group encompasses a range of innovative businesses centered around content creation, including: NetEase Games, one of the largest and most renowned game developers worldwide by size, revenue and game offerings. Over the years, NetEase Games has focused on developing high quality content and providing the best experience for gamers around the world; Youdao (NYSE: DAO), a majority-controlled subsidiary of NetEase, Inc. and China’s leading technology-focused intelligent learning company; Cloud Music (HKEX: 9899), a majority-controlled subsidiary of NetEase, Inc. and China’s leading online music content community; Yanxuan, NetEase’s private label consumer lifestyle brand; and Other innovative businesses, including, among others, an online payment platform and to-B AI technology solutions provider. About this Role: We are seeking a mid-level Group Privacy Legal Counsel with 4–8 years of experience to join our legal team. You will manage global privacy compliance, mitigate data risks, and support cross-functional teams on privacy-by-design initiatives, reporting to NetEase’s Head of Privacy & Data Protection. You will also support cybersecurity risk management and compliance with emerging AI regulations and related matters. This position is part of the Group International Legal department which oversees legal matters for the NetEase group (ex-China) and coordinates with the legal teams within each division of the group. Responsibilities Include: Compliance Management: Maintain and update global privacy policies, notices, and internal frameworks for our global business units, including online games, music streaming, e-commerce, e-sports, intelligent learning, and others. Product Counseling: Work with product and engineering teams to implement privacy-by-design and privacy-by-default and responsible AI principles into product lifecycles. Risk Assessments: Provide legal guidance on cross-border data transfers and data localization requirements and conduct, review, and document Data Protection Impact Assessments (DPIAs). Contract Management: Draft, negotiate, and review Data Processing Agreements (DPAs) as well as the data privacy-related provisions in a wide range of commercial agreements with third parties, including IP licensing and software co-development agreements. Incident Response: Investigate potential data/cybersecurity incidents and manage regulatory notification obligations. Employee Training: Design and deliver privacy and AI awareness training across global offices. Regulatory Monitoring: Track emerging privacy and AI laws (e.g., GDPR, CCPA/CPRA, EU AI Act, EU Digital Services Act, local regulations) and update frameworks. Outside Counsel: Collaborate and coordinate with outside counsel across various jurisdictio...