Lead Sr Legal Counsel-Local Data Protection Officer for Greater China (GC), DPPC Korea, Japan

We help the world run better At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.     PURPOSE AND OBJECTIVES When processing personal data as part of its business operations, SAP must comply with the requirements of the EU’s General Data Protection Regulation (GDPR) and other applicable data protection and privacy laws in the countries where SAP operates. To support the local SAP entities in meeting their data protection and privacy compliance obligations, SAP has established a global network of Data Protection and Privacy Coordinators (DPPC’s). This network consists of local DPPC’s that report to the management of the SAP entities by which they are hired and regional DPPC’s that are part of SAP’s global Data Protection & Privacy team reporting to SAP’s Group Data Protection Officer. We are looking for a local Data Protection Officer for Greater China, including support as local Data Protection and Privacy Coordinator (DPPC) for Korea and Japan. EXPECTATIONS AND TASKS The China Data Protection Officer (DPO) is responsible for ensuring the organization's compliance with China's data protection regulations and supporting local compliance with GDPR and other global data protection regulations. This role involves collaborating closely with the global data protection and privacy team, local business units, and external stakeholders to manage data protection risks and drive data protection and privacy awareness across the organization. Key Responsibilities: Regulatory Compliance:

Ensure compliance with Chinese data protection and privacy laws, GDPR, and other relevant regulations. Monitor and interpret changes in data protection legislation, regulations, and industry standards. Provide timely updates and guidance on regulatory developments and best practices.

Serve as a subject matter expert, advising the executive board and cross-functional teams on data protection and privacy matters. Collaborate with stakeholders, including the local CFO, to ensure compliance and risk management. Communicate effectively with authorities and external stakeholders.

Develop and deliver training programs to build data protection and privacy awareness across business units. Ensure that all employees understand their roles and responsibilities in protecting data.

Monitor compliance with data protection policies and procedures. Analyze changes in local laws and provide gap analysis and support local implementation projects Conduct data protection audits and assessments to identify and mitigate risks. Prepare and submit reports on compliance status to the global data protection team and local executives.

Advise on the development and implementation of data protection and privacy policies, standards, and procedures. Provide legal and compliance advice on data protection issues and conduct impact assessments for new projects and initiatives. Assist the local Chief Finance Officer (CFO) for their assigned region in meeting their responsibility for GDPR topics, local data protection topics and dedicated processes of the legal entity, Represent SAP’s Group Data Protection Officer (DPO) within the assigned region based on the instructions given by the DPP team Help strengthen the global data protection community within SAP Support in a case of

supervisory authority requests data breaches, escalations triggered by a data subject or any other control