Head of Data Privacy

The CompanyWe are Geely Auto Europe, part of Geely Holding Group, one of the world’s largest automotive groups. With a strong focus on innovation, advanced technology and sustainable mobility, we are committed to shaping the future of transportation and accelerating the transition towards intelligent and electrified mobility.As the automotive industry continues to evolve through connectivity, digitalization and artificial intelligence, data privacy and responsible data governance are essential to building customer trust, enabling innovation and supporting sustainable business growth across Europe.The roleWe are seeking an experienced Head of Data Privacy, EEA to lead our pan-European privacy strategy, oversee regulatory compliance, and manage a dedicated team of privacy professionals. In this role, you will serve as the strategic anchor for all data protection matters across the European Economic Area (EEA) for Zeekr and Geely Auto brands, ensuring our operations align with the GDPR, local member-state laws, and emerging EU digital regulations. You will act as a key advisor to executive leadership, champion a privacy-by-design culture, and manage relationships with European Data Protection Authorities (DPAs).The role will establish effective privacy governance, manage regulatory risks and embed privacy-by-design principles across business operations, products and technologies.Working closely with senior management, Legal, Product, Engineering, IT and Group functions, the Head of Data Privacy will support responsible data use and innovation, particularly in areas such as connected vehicles, telematics, artificial intelligence and digital services.Key Responsabilities:Multi-Brand & Cross-Entity Governance• Govern the EU data privacy program for a group of distinct entities, ensuring regulatory alignment across a diverse corporate structure.• Define and implement the European data privacy strategy, policies and governance framework.• Manage data privacy operations for two distinct automotive brands, maintaining brand autonomy while standardizing core compliance processes.• Oversee privacy operations for sales and distribution entities across multiple EU member states, addressing localized consumer laws and dealer-network dynamics.Operational Legal Advice & Hands-on Execution:• Provide day-to-day, actionable legal advice to business units, engineering teams, and regional sales entities on complex data processing queries.• Maintain a deeply hands-on approach to daily operations, directly reviewing high-risk Data Protection Impact Assessments (DPIAs), drafting Legitimate Interest Assessments (LIAs), and negotiating complex Data Processing Agreements (DPAs) alongside your team.• Balance daily advisory workloads with team coordination, ensuring resources are effectively allocated between firefighting immediate operational issues and long-term strategic projects.Product & Innovation:• Embed Privacy by Design across multiple product lines, including connected vehicle technologies (telematics), mobile applications, and digital mobility services.• Steer compliance for complex data flows involving IT systems used for our dealer network, marketing communication, fleet management, connected vehicles data processing and over-the-air (OTA) updates.• Embed privacy-by-design and privacy-by-default principles into products, services and business processes.• Advise on privacy matters involving connected vehicles, telematics, AI, data analytics and IT systems.• Perform Privacy Impact Assessments, Transfer Impact Assessments and advice on international data transfers and third-party privacy requirements.• Coordinate privacy incidents and data breaches with Legal, Cybersecurity, IT and other relevant teams.• Collaborate with the Data Protection Officer (DPO), where applicable, and support regulatory inquiries and audits.• Collaborate with the Group, and other subsidiaries under the Group across Europe and globe in Data issues.• Lead privacy training, awareness initiatives and continuous improvement of internal controls.Team Leadership & Regulatory Oversight• Lead, mentor, and scale a team of Data Privacy Counsels supporting both Zeekr and Geely Auto brands across different sales territories.• Serve as the primary liaison for European Data Protection Authorities (DPAs) regarding group-level inquiries, product audits, or cross-border data processing investigations.Qualifications & Experience:• 10 - 12+ years of relevant experience in data privacy, data protection and technology regulations, including senior-level responsibilities, with minimum 6 years of background in the automotive, mobility, tech or IoT industries.• Leadership: 5+ years of experience managing, budgeting, and scaling direct reports in a pan-European matrix organization is required.• Multi-Entity Expertise: Proven track record managing privacy frameworks for a group structure with a multi-brand strategy and decentralized sales entities across Europe.• Product Privacy Acumen: Direct experience working alongside engineering and product teams advising on connected technologies, IT systems, AI, telematics, connectivity or other data-driven products and services to secure connected hardware.• Proven experience developing privacy programs, governance frameworks and risk management processes.• Ability to work effectively across European and global teams in an international, multicultural environment.• CIPP/E or an equivalent privacy qualification required.To thrive at Geely Auto Europe we believe that you have the courage to lead with trust and care and you don’t mind getting your hands dirty. You are highly innovative and have a great ability to adapt and perform in a constantly changing, fast-paced, highly demanding work environment. Like us, you believe it’s important to have a passion to work in an international and multicultural environment with the desire and ability to embrace the diversity of people, perspectives, and styles.Apply today, we will perform ongoing selection during the application period. We look forward to hearing from you.Please note that due to GDPR regulations we can only accept applications sent through the recruitment system, not via email or other channels. We do not accept applications submitted by external recruitment companies.