Director, Head of APAC Privacy

We invite you to join an elite team of visionaries and creators, helping us forge global connections and vibrant communities that generate inclusive economic opportunities for everyone. 

eBay’s Litigation, Privacy, Technology, and AI Governance team is a global, outstanding organization responsible for eBay’s compliance with applicable privacy and data protection laws, as well as the ethical development and commercialization of our data-driven marketplace products. Our team ensures that data protection is seamlessly coordinated into eBay’s product design and business processes that collect, use, disclose, or retain personal data about our global buyers, sellers, and employees. We demonstrate thought leadership in data protection, advocating for strong internal standards and engaging effectively with regulators worldwide. 

The Head of APAC Privacy role will be a key regional pillar of this global team, providing strategic legal advice and support to ensure the rollout and maintenance of a robust privacy, data protection, and AI governance program across the Asia Pacific region. Based in Australia, you will provide vision and leadership to privacy support to our diverse operations, from our established domestic marketplaces (eBay Australia and Qoo10 in Japan); our payments business based in Australia and our international Cross-Border Trade (iCBT) businesses in China, Japan, India, and South Korea, as well as our high-potential seller growth markets in Southeast Asia (SEA) and the Middle East. In this role you will report to the Head of Privacy Advisory based in the US, liaise closely with APAC legal counsel and other global team members within the Litigation, Privacy, Tech and AI governance team. 

The Role 

• Strategic Regional Leadership: Provide strategic advice to the business on new privacy and data trends, ensuring our regional e-commerce products, services, and seller tools comply with relevant legal and regulatory requirements. 

• Privacy by Design: Lead efforts to implement Privacy by Design (PbD) methodologies across APAC product launches, collaborating deeply with engineering and product teams to embed privacy directly into the technology. You will be the APAC privacy subject matter authority for our Privacy Risk assessments (PRAs)/DPIAs and AI intake processes including third party vendor management compliance processes 

• Evolving & Amending Laws: Monitor, assess, and drive compliance readiness for evolving privacy laws across the region. This includes operationalizing new frameworks in emerging markets (e.g., India’s Digital Personal Data Protection (DPDP) Act/data protection laws in Middle East) and implementing critical amendments to existing regimes (e.g., Australia’s Privacy Act and Japan’s APPI, as well as supervising amendments to South Korea’s PIPA). 

• Regulatory Engagement & Escalations: Act as the primary regional point of contact for sophisticated user critical issues. Lead incident management and response efforts, and confidently navigate and handle regulatory inquiries, audits, and investigations from Data Protection Authorities (DPAs) across APAC and the Middle East. 

• AI Governance: Support the rollout of eBay’s global AI Governance framework in APAC, advising on the ethical use of artificial intelligence, monitoring emerging regional AI regulations, and ensuring accountability in our data-driven features. 

• Global Alignment: Act as a critical link between the APAC business and the EU/US-based privacy leadership. You will provide training for regional teams on requirements and ensure local implementations align with eBay's global baseline standards. 

All About You 

• Legal Qualifications: Must hold a law degree and be admitted to practice law in Australia. 

• Experience Level: Minimum of 10 years of dedicated privacy and data protection experience at a top-tier law firm or in-house legal department. Familiarity and legal experience within the e-commerce, digital marketplace, or platform technology industries is highly preferred. 

• APAC & Global Privacy Expertise: Deep understanding of data protection laws and cross-border transfer requirements throughout the APAC. As well as practical experience navigating and applying European Union privacy concepts within an international business footprint. 

• Certifications: CIPP/E (Certified Information Privacy Professional/Europe) certification is highly preferred; 

• Regulatory Track Record: Consistent track record of handling privacy inquiries, consumer complaints, data incidents, and dealing directly with DPAs and regulators in the region. 

• Technical Fluency: Capability and eagerness to explore technology. You should have expertise with Privacy by Design, conducting DPIAs, and a strong knowledge of relevant technologies including data anonymization, cloud infrastructure, and artificial intelligence. 

• AI fluency: including the effective and responsible use of generative AI and legal technology tools to support litigation tasks and improve efficiency without compromising legal judgment or work quality. 

• Analytical & Pragmatic: Strong analytic capabilities with an ability to work on sophisticated regulatory and business problems. You must be adaptable and bring a practical and creative approach to compliance that supports business growth.  

• Communication Skills: Exceptional interpersonal and writing skills, with the proven track record to establish relationships, simplify highly technical material for business audiences, and collaborate optimally with legal, business, and engineering colleagues across multiple time zones.