Data is strongly associated with both national sovereign and security and enterprise transformation and upgrading. Our data compliance experts are not only familiar with China's regulatory framework, but also certified as the EU and U.S. privacy professionals by International Association of Privacy Professionals (IAPP). Our experts all have a broad international perspective and deep insights into the policy trends. Additionally, we have been striven to go deep into business scenarios to help enterprises' digital transformation and development, insisting that compliance is the starting point and development is the goal. Through years of legal practice in this field, we have rich experience in data compliance in finance, automotive, medicine and health, e-commerce, TMT, etc. Our team is particularly adept at, through combining creative legal thinking and optimal compliance measures, handling data regulatory matters. We are typically good at providing tailored advice to enterprises on complex regulatory matters and risk management, and assisting in the whole process of implementation.
Our Services
For the cybersecurity and data protection requirements under Chinese laws and regulations, the EU GDPR, and the U.S. HIPAA/COPPA/CCPA rules, our professionals offer reliable services as follows:
Legal
Draft and review legal documents such as privacy policy, data protection agreement, cross-border data transfer agreement, etc.
Draft and review agreements and business policies relating to the provision of internet products and services
Review and revise employment contracts and employee privacy statements
Provide legal updates on cybersecurity and data protection
Provide dispute resolution and lawsuit response concerning data-related infringement, contracts, antitrust and unfair competition matters
Compliance
Draft and review data security management policies or guidelines
Draft and revise data assets classification policy and procedures
Draft and review important data identification and impact analysis documents
Draft and review internal assessment documents on Critical Information Infrastructure (CII) identification
Risk Assessment
Assist in self-assessment based on Cybersecurity Law
Assist in self-assessment on personal information protection impact
Assist in self-assessment in cross-border data transfer
Assist in identifying the roles of client as a data controller or processor and analyzing legal obligations accordingly under relevant legislations and standards
Advise on remedial measures to fulfill regulatory obligations and reduce risks
GR/PR
Assist to build long-term trustworthy relationship with data protection authorities
Respond to data security incidents and incidents of incompliance
Create communication and coordination channels with relevant government agencies and key stakeholders
Report and communicate swiftly with supervisory authorities and media platforms
Mitigate business impacts from negative media exposure
