Job Description
The West Kowloon Cultural District Authority welcomes exceptional talent with a passion to realise the vision and mission of making the West Kowloon Cultural District a prime local and international destination for arts, culture and entertainment.
You will be responsible for:
supporting the Legal Advisor and the Data Protection Office (DPO) in implementing and maintaining the Authority’s data privacy governance framework, including the Authority’s Privacy Policy, Personal Information Collection Statement, internal guidelines, and compliance documentation, consent records, and data handling templates, and ensuring compliance with the Personal Data (Privacy) Ordinance (PDPO) and other relevant laws and regulations such as the EU General Data Protection Regulation (GDPR) and Personal Information Protection Law of the Mainland (PIPL);
conducting Privacy Impact Assessments and related checklists, maintaining related records, and tracking follow-up actions;
supporting the DPO and acting as the point of contact for data subjects in data privacy related matters, including handling and responding to data subject access/ correction requests, and doing timely investigations and reactions for potential incidents related to data breaches, complaints, claims and notifications;
monitoring and tracking developments in data protection and related legal areas, developing and delivering data privacy and compliance trainings on a regular basis to enhance staff awareness and promote best practices;
monitoring the effectiveness of the district-wide data privacy management programme and facilitating the regular reporting to the management and various stakeholders from time to time;
assisting the Legal Advisor and/or Assistant Legal Advisor in reviewing contracts relating to arts and cultural events, performance, sponsorships, donations, acquisitions, loans and commissions of artworks, museum matters, moral rights and intellectual property rights issues; and
performing any other duties as reasonably assigned by the Legal Advisor / Department Head and the Authority from time to time.
You should:
possess a recognised university degree in Law or equivalent;
have at least 5 years’ relevant experience in data privacy (with sound knowledge of the PDPO, PIPL and GDPR) and in reviewing and drafting commercial contracts;
have experience in developing guidelines or training on data privacy and exposure to the cultural, arts or entertainment sector is an advantage;
have strong project management, research, analytical and interpersonal skills, with proven ability to manage competing priorities under pressure; and
be proficient in written and spoken English and Chinese.
For interested parties, please submit your application with detailed CV on or before following date. Applicants are encouraged to submit their applications as soon as possible. The review of applications will continue until post is filled.
20-05-2026
Data collected will only be used for job application processing. Your data may be accessed by our appointed recruitment consultants who have agreed to keep confidence of all personal data in not less than the standards applicable to us. Applicants not being invited for interview within 4 weeks from the submission date may assume their applications unsuccessful.
All related information will be kept up to 24 months and all personal data will be destroyed afterwards.
For more information, please visit https://www.westk.hk or contact:
Jason Wong /+852 22000285