Turning EU privacy requirements into practical business processes, technical controls and implementable compliance solutions.
Jason brings more than 10 years of international experience in data protection and privacy compliance, supported by more than 20 years in the IT field.
His career spans international roles at IBM, Nokia, Huawei and ByteDance, together with a strong technical background in software development, system integration, cloud services, data processing and privacy engineering.
His key strength is translating legal and regulatory requirements into practical measures that business, product, engineering and operational teams can understand and implement.
Jason has practical experience leading and supporting cloud-service certification projects.
Certified EuroPriSe Privacy Expert — CEPE L&TQualified in both legal and technical privacy evaluations.
July 2026 – Present
Privacy and Data Protection Expert
Provides privacy and data protection compliance support to law firms, privacy consulting service providers and their clients expanding into European markets, including compliance assessments, risk identification, cross-border data transfer compliance and assistance with privacy certification.
December 2023 – June 2025
Privacy Business Partner and Researcher
Conducted privacy compliance reviews throughout the SDLC for international businesses, including TikTok and TikTok Shop. Analysed significant enforcement cases and regulatory developments worldwide.
October 2014 – November 2023
Principal Privacy Engineer
Responsible for privacy and data protection compliance for Huawei’s consumer mobile applications and cloud services throughout their launch and ongoing operation in Europe, supporting their successful entry into European markets.
January 2005 – June 2012
Lead Developer
Responsible for the development of internal ERP systems and global SAP ABAP applications.
January 2000 – June 2003
IT Specialist
Designed and delivered systems integration solutions for clients across banking, energy, healthcare and other industries.
1997 – 1999
Mainframe Developer
Developed mainframe applications supporting core banking services.
Jason played a key role in building the privacy team and establishing, from the ground up, the privacy and data protection management framework for Huawei’s consumer mobile cloud services in Europe. He made significant contributions to enabling dozens of mobile applications and cloud services developed by China-based teams to enter and operate successfully across EU/EEA markets.
His work covered privacy reviews, Privacy Impact Assessments (PIA) / Data Protection Impact Assessments (DPIA), Privacy by Design, Records of Processing Activities, privacy notices, user agreements, data processing contractual clauses, risk identification and mitigation, data subject request handling, remote-access governance, and cross-border data transfer compliance solutions. Combining privacy expertise with a strong technical background, Jason bridged the gap between legal and engineering teams by translating EU privacy requirements into clear, actionable technical requirements and documentation, enabling more effective cross-functional communication and implementation. In addition, he delivered privacy awareness training to relevant privacy team members.
Led Huawei’s first EuroPriSe privacy certification project for the relevant European consumer mobile cloud service, successfully achieving initial certification. Managed the end-to-end certification lifecycle, including project initiation, budgeting, contract negotiations, scope definition, readiness assessment, evidence preparation, remediation, maturity assessment and independent evaluation support, certification maintenance, and renewal.
As program manager, Jason led the first ISO/IEC 27001 and CSA STAR certification program for Huawei mobile services in Europe, successfully achieving initial certification. He coordinated control implementation, evidence preparation, stakeholder interviews, audit activities, and the remediation of non-conformities across global product teams, R&D and operation teams in Europe and China, third-party data-centre providers, HR, legal, privacy, and information security teams.
Jason later supported the coordination of re-certification activities, the scope was expanded to ISO/IEC 27701 privacy information management requirements and ISO/IEC 27018 cloud privacy controls.
Contributed to an LLM-based automation project supporting privacy reviews for ByteDance’s TikTok and TikTok Shop. The project aimed to automatically identify privacy risks earlier in the SDLC and improve the consistency and efficiency of privacy assessments in order to reduce the workload of PDPO compliance reviewers.
Jason supported the development of expert-reviewed ground truth, prompt and workflow refinement, evaluation checklists and a knowledge base, as well as performance comparisons across different LLMs. He also performed human-in-the-loop validation by reviewing and labelling model outputs, analysing false positives and false negatives, and refining prompts and evaluation criteria to improve the precision, recall, and overall accuracy of privacy-risk identification.
Jason drove the privacy compliance design and implementation of an Interactive Advertising Bureau (IAB) Europe TCF–aligned Consent Management Platform for Huawei’s digital advertising services. He successfully supported the platform through IAB CMP validation and registration, resulting in the issuance of an official CMP ID and inclusion in the IAB Europe registry of registered CMPs.
His work covered privacy solution design and review, user journeys in the app, advertising data-flow and vendor UI assessments, layered consent interfaces, preference controls and default settings, TC String and CMP API requirements, backend consent-processing requirements, validation support, remediation, and production verification. Working across advertising, product R&D, and privacy teams, he helped ensure that users’ choices were accurately captured, communicated, and enforced throughout the advertising ecosystem.
Combining our cross-functional expertise in privacy compliance and technology, we translate complex EU privacy and data protection requirements into actionable business processes, technical measures and compliance solutions—helping your company achieve and maintain compliance across European markets.
Contact us