Next Generation Partners

Rising Stars

Firms To Watch: Data protection: foreign firms

Hogan Lovells International LLP‘s growing China data protection practice caters to PRC tech companies as well as foreign banks and consulting firms. The team, with Sherry Gong being the key name, handles work such as advising on the cybersecurity aspects of projects and deals, as well as assisting with AI implementation.
With major clients in the biomedical, food production and tech spaces, White & Case LLP is developing its PRC data protection practice under the leadership of Bingna Guo. The firm assists with data compliance and policy updating, and also supports on the data protection aspects of cross-border M&A deals.

Data protection: foreign firms in China


Assisting major multinationals including Disney, BP and Microsoft with data protection and cybersecurity matters in China, CMS is highly regarded in this space. The team is led by the experienced Ulrike Glueck, who also heads up the firm’s China corporate practice and TMT sector group, and Hong Kong & Beijing office managing partner Nick Beckett, an intellectual property expert recommended for advising on China’s personal information protection legislation. Also key to the practice are associates Panpan Tang, a data transmission specialist, and Kelly Chen, who brings the experience of having worked in-house for a number of major internet technology companies operating in China.

Practice head(s):

Ulrike Glueck; Nick Beckett

Other key lawyers:

Panpan Tang; Kelly Chen

Key clients



University of Glasgow


Warner Music Group



Work highlights

Morrison Foerster

Morrison Foerster regularly handles the data protection and compliance aspects of M&A deals, as well as cross-border data transfers and data breach responses. The firm assists major multinational IT, tech and healthcare companies operating in mainland China and more broadly across East Asian jurisdictions. The practice is jointly led by cybersecurity and robotics expert Chuan Sun, the regulatory compliance focussed Paul McKenzie – both located in Shanghai – and Hong Kong based SaaS platforms and video game industry specialist Gordon Miller. Associate Ting Ting Gao, who focuses on financial services sector data security matters, is also key.

Practice head(s):

Paul McKenzie; Chuan Sun; Gordon Milner

Other key lawyers:

Ting Ting Gao


‘Morrison Foerster is both knowledgeable and very responsive to clients. They are also creative thinkers when it comes to identifying possible solutions for clients. They are very collaborative and accommodating with clients.’

‘Chuan Sun has been very responsive to requests and always provided thorough, tailored advice.’

‘The MoFo Data Protection team is phenomenal: knowledgeable, responsive, solution oriented and efficient. They are the best firm I have ever worked with.’

‘Gordon Miller, Paul McKenzie, Ting Ting Gao, all team members at MoFo go above and beyond and are some of the best lawyers I have ever worked with. They have my highest recommendation.’

Key clients


Work highlights

  • Advised Roblox on the data protection aspects of the structuring and establishment of its joint venture with Tencent (Luobu) and the launch and ongoing operations of the Roblox platform and the management and cultivation of its associated community of creators in China.

Reed Smith LLP

Reed Smith LLP represents a stellar client list of financial services, media and IT companies operating in China. The team is headed by Barbara Li, recommended for providing ‘accurate, timely, and practical advice‘, who joined the firm from Rui Bai Law Firm in October 2022. Li’s range of work includes data mapping, data strategy and compliance advice, designing data programs and protocols, overseeing cross-border data transfers and managing data breaches. Further names to note include Amy Yin, who specialises in data protection work for clients in the life sciences and green technology sectors, and Sarah Xiong , whose focus is on compliance and digitalisation projects.

Practice head(s):

Barbara Li

Other key lawyers:

Amy Yin; Sarah Xiong


‘This team’s strengths include expertise in Chinese data protection law and regulation, including cross-border data transfers. They are able to provide practical advice and not just restate the law, and they provide fast and thorough guidance.’

‘I go to Barbara Li for any complex issues with data protection in China. She is very quick to respond and provides accurate, timely, and practical advice.’

Work highlights

Baker McKenzie FenXun

Baker McKenzie FenXun‘s TMT practice regularly advises on complex data protection and cybersecurity matters, including regulatory compliance, data storage reviews and investigations. The team is led by experienced media and IP lawyer Lex Kuo, based in Hong Kong, and Shanghai-based Zhenyu Ruan, an expert in advising financial services companies on data privacy. Special counsel Grace Gao is also a key contact.

Practice head(s):

Lex Kuo; Zhenyu Ruan

Other key lawyers:

Grace Gao

Key clients


Becton Dickinson & Co

Bose Corporation


Gulf Innova Company Limited



Work highlights

  • Acted for UBS in its role as distributor and custodian on the issuance of a blockchain-based tokenised bond.
  • Advised Chanel on technology-related regulations in Hong Kong and mainland China, concerning platforms, online consumer law, AI, metaverses, cyber security, NFTs, blockchain and cryptocurrencies.
  • Advised Gulf on a joint venture in Thailand with a centralised digital asset exchange firm originating in China and the drafting of a technical services agreement.

Bird & Bird

Bird & Bird has a mainland China presence for data protection law through Beijing-based James Gong. Gong has a strong understanding of the local regulatory landscape in China having worked in this field for a decade. He regularly assists major multinationals, including Sony, with their GDPR and systems compliance matters. He is also well-placed to advise on data transfers and breaches.

Practice head(s):

James Gong

Other key lawyers:

Ying Zhong; Jacqueline Che

Key clients


ALK-Abelló A/S

Stryker Pacific Ltd

Work highlights

  • Advised Sony on compliance with PRC data protection laws and regulations.
  • Advised ALK-Abelló A/S on its compliance with data protection laws, as well as identifying and mitigating data security and cybersecurity risks.
  • Advised Stryker Pacific Ltd on its compliance with the applicable privacy and data protection legislations and provided DPO services where required.


Linklaters assists a number of well-known multinational clients in several sectors with the implementation of data compliance programmes under China’s new data protection laws, as well as advising on commercial technology transactions and licensing matters. The Shanghai team is led by data management and cybersecurity expert Alex Roberts.

Practice head(s):

Alex Roberts


‘They have a reasonable structure and smooth cooperation within the team. Proper analysis can be completed in a relatively short time for complex tasks. Able to communicate well and effectively with the company’s internal business and technical staff to get the job done.’

‘They give executable, practical suggestions according to the needs of customers.’

‘The team provides timely and professional advice on hot topics and is always very swift in responding to requests from financial sector market participants. Over the years had provided consistent quality advice and is now a trusted advisor when it comes to data regulations in China.’

Key clients


Asia Securities Industry & Financial Markets Association (ASIFMA)

Work highlights