Legal Counsel – Data Privacy (Korea)

Job Mission

Reporting to the Senior Legal Counsel – Data Privacy (Korea), and as part of the Chanel Korea Legal team, the Legal Counsel – Data Privacy will serve as a key advisor on privacy, data protection, and information governance matters across the business.

The role will partner closely with local, regional, and global stakeholders to provide privacy legal advice, lead data incident response, support regulatory engagements, and drive privacy compliance initiatives, ensuring compliance with Korean privacy laws in an increasingly active enforcement environment.

Key Responsibilities

1. Privacy Legal Advisory & Compliance

• Provide practical, risk-based privacy advice across CRM, ecommerce, marketing, retail, HR, digital, and client engagement activities
• Assess privacy risks and recommend commercially pragmatic compliance solutions
• Review and negotiate Data Processing Agreements and other privacy-related contractual provisions with third-party vendors
• Advise stakeholders on PIPA compliance requirements and evolving regulatory expectations
• Support implementation of privacy requirements across business initiatives, operational processes, and organizational changes

2. Data Incident Management

• Lead legal response to data incidents, data breaches, and privacy-related matters requiring urgent assessment and decision-making
• Coordinate investigations with business teams, IT, Cybersecurity, Client Care, HR, Compliance, and other stakeholders
• Manage alignment and communications with regional and global privacy teams during incident response
• Assess legal notification and reporting obligations and coordinate regulatory communications where required
• Support remediation efforts and continuous improvement of incident response processes and controls

3. Regulatory & Enforcement Support

• Support responses to regulatory inquiries, audits, investigations, inspections, and enforcement matters
• Assist with submissions, fact-finding, stakeholder coordination, and regulatory communications
• Partner closely with the Senior Legal Counsel – Data Privacy on significant regulatory exercises, investigations, and enforcement matters
• Monitor legal and regulatory developments impacting privacy compliance
• Support privacy-related compliance or certification programs

4. Privacy Projects & Operational Support

• Provide privacy support for global, regional, and local projects involving personal data
• Partner with Marketing, Retail, Client Care, HR, IT, Security, and other functions on data-related initiatives
• Support data subject rights processes and compliance with local legal requirements
• Conduct or support privacy impact assessments, data mapping, and privacy-by-design initiatives
• Support rollout and execution of global and regional privacy initiatives within Korea

5. Documentation, Training & Awareness

• Draft and update privacy notices, consent forms, policies, procedures, and related documentation
• Support localization and implementation of global privacy policies, frameworks, and templates
• Maintain privacy governance records and compliance documentation
• Develop training materials, awareness programs, and practical guidance for business stakeholders

Profile & Qualifications

• Lawyer qualified in Korea or another relevant jurisdiction, with fluency in both English and Korean
• At least 4 years PQE gained in a leading law firm and/or major company
• Experience advising on data privacy, technology, cybersecurity, digital, or regulatory matters
• Strong knowledge of Korean privacy laws and regulations, including PIPA
• Experience managing data incidents, regulatory inquiries, investigations, or enforcement matters preferred
• Demonstrated ability to manage time-sensitive matters and coordinate effectively across business, technical, regional, and global stakeholders
• Strong drafting, analytical, stakeholder management, and project management skills
• Collaborative, business-oriented mindset with the ability to work independently in a fast-paced environment