Data protection: PRC firms in China

Fangda Partners

One of China’s premier domestic firms, Fangda Partners has quickly developed extensive expertise in all areas of data protection and cyber security, allowing it to provide a full service to its client base of multinational, state-owned, and domestic private companies. The group stands out for the diversity of its practice; in addition to advising on large compliance projects, the team also assists with data breach responses, regulatory investigations and criminal proceedings. Kate Yin, who advises on export controls, anti-corruption and multilateral bank sanctions in addition to data,  leads the practice, which operates across the Beijing, Shenzhen, Guangzhou, and Hong Kong offices. Gil Zhang‘s growing reputation in global GDPR compliance projects was reflected in his promotion to partner in April 2021.

Practice head(s):

Kate Yin

Other key lawyers:

Yanjun Zhuang; Gil Zhang; Katharina Zhang

Testimonials

‘Fangda Data protection team’s reaction is always speedy and their fee is reasonable.’

‘Gil Zhang’s reaction is always speedy and their fee is reasonable.’

‘The team was technically very strong and had an immediate grasp of the issues from both local law and international perspectives. The Fangda team did not require much in the way of instruction and produced high quality work product. ’

‘Gil Zhang is a standout performer with excellent technical skills, and is a strong and clear communicator and an impressive perspective on international matters. ’

 

Global Law Office

Global Law Office‘s team operates on a cross practice basis, and as such is able to offer expertise in a broad range of data-related issues. The group’s client base includes international household names in the tech sector such as Microsoft and HP, which the team advises on complex compliance projects in addition to regulatory investigations. Maggie Meng leads the Beijing team and uses her previous experience working in-house to advise clients in the TMT sector, as well as banks and insurance companies. In Shanghai, Vincent Wang assists with data issues as part of a wide-ranging practice focusing on emerging technologies.

Practice head(s):

Maggie Meng; Vincent Wang

Other key lawyers:

Alan Zhou

Testimonials

‘The team works actively, with high-quality and reliable output.’

‘Maggie Meng pays great attention to quality.’

‘Maggie Meng’s team in Beijing is young, with a broad vision and active thinking. They have a strong curiosity and do serious research on emerging industries and related legal services, and thus explore a unique and effective way of providing legal services.’

‘After discovering the blue ocean field of data governance and personal information protection in the lawyer service industry with a keen eye, Maggie Meng works intensively, applies theories widely to practice, actively shares and promotes excellent experience, leads the development of the industry and sets a benchmark.’

Key clients

Xiaomi Corporation

Auto Home Inc.

HP Inc.

Microsoft Corporation

Work highlights

  • Advised Xiaomi Corporation on a compliance project.
  • Advised Auto Home Inc. on cross-border data issues.
  • Advised HP Inc. on various data issues.

Han Kun Law Offices

Han Kun Law Offices‘ data practice is amongst the most complete on the market, advising both large domestic firms and international household names on all data aspects of their operation in China. Typical work includes internal compliance projects and corporate support, in addition to assisting companies that are subject to investigation by regulators. The firm also has experience in assisting multinational clients with navigating overseas data regimes including GDPR, BIPA and CCPA. Min Zhu is one of the key practitioners and has particular experience in the healthcare and life science industries, while Yan Wang and Zhichao (Kevin) Duan complement their data practices with a specialism in IP.

Other key lawyers:

Yan Wang; Zhichao Duan; David Tang; Min Zhu; Michelle Gon

King & Wood Mallesons

As one of China’s biggest corporate firms, King & Wood Mallesons has developed strong data protection offering to assist its domestic and multinational clients with data commercialisation, cross-border data transfers and the establishment of compliance procedures. The group is particularly strong with regards to assisting state-owned enterprises, as demonstrated by its recent work advising State Grid Corporation of China on a major compliance project. Susan Ning leads the practice and is instructed by cutting-edge clients from numerous industries to advise on China, EU and US data regulations. Ning is assisted by junior partner Han Wu, who is experienced in responding to network security incidents and cybersecurity investigations.

Practice head(s):

Susan Ning

Other key lawyers:

Han Wu

Testimonials

‘With thorough grasp and in-depth understanding on the evolution of data compliance laws and regulations, as well as in-depth interaction with regulatory authorities, the team is able to provide relevant and constructive professional advice on data protection.’

‘Wu Han has in-depth insight into China’s regulatory system and legislation/enforcement dynamics to help clients systematically review compliance requirements and provide comprehensive and robust compliance advice.’

‘Wu Han has a unique understanding on regulatory trends, helps clients predict regulatory and compliance requirements in advance, and plays an important role in the construction of the company’s compliance system. He has a good understanding on data security and data compliance, with a lot of practical experiences.’

‘Wu Han with solid basic knowledge, are able to provide clients with practical solutions.’

‘Attorney Wu Han’s team has rich professional knowledge and business practice on data compliance.’

‘Wu Han has solid professional knowledge and rich business practice, responds to client needs in time, and is able to answer client inquiries seriously.’

‘They have a good understanding of the automotive industry, especially providing great support in autonomous driving.’

‘Wu Han has strong professional knowledge and ability to help automobile clients effectively meet various legal needs in data security and privacy compliance.’

Key clients

Agricultural Bank of China

State Grid Corporation of China

China Everbright Group

Work highlights

  • Assisted the Everbright Group with a data fusion project.
  • Assisted the Agricultural Bank of China with its data compliance-consulting project under the Cybersecurity Law.
  • Assisted the State Grid Corporation of China with carrying out the cybersecurity and data compliance.

Zhong Lun Law Firm

Zhong Lun Law Firm is consulted by large multinationals and domestic companies to advise on the complete spectrum of data issues, from internal compliance assessments to emergency data breach responses. Though primarily comprising of IP lawyers, the group operates on a cross-practice basis and is able to call on partners with various specialisms; Peng Cai, a TMT and IP specialist, is one of the team’s key partners and frequently works with state-owned enterprises on compliance projects, while Xinyu Liu (a partner in the private equity and investment funds departments) assists with data due diligence necessary for corporate transactions. Jihong Chen and Yongjun Ni lead the IP department and assist with various data-related matters.

Practice head(s):

Jihong Chen; Yongjun Ni

Other key lawyers:

Peng Cai; Xinyu Liu

Testimonials

‘It is an understatement that the TMT space in China has (and is) undergoing a lot of changes. Zhong Lun partners have a good sense of the pulse of these regulatory changes and could advise us strategically on what to expect, and how should we work together with compliance, risk management and practical solutions. ’

‘Chen Jihong has a great sense of the regulators’ thinking behind the laws (and draft laws), and is able to advise us on what market players are doing to meet the requirements of the laws.’

Key clients

Tencent Holdings Ltd.

Amazon (China) Investment Co., Ltd.

Daimler Greater China Ltd.

State Grid Corporation of China

Schneider Electric (China) Co. Ltd.

Audi (China) Enterprise Management Co., Ltd.

Schindler (China) Elevator Co. Ltd.

Microsoft Corporation

Kerry Properties Ltd.

Cisco System, Inc.

NVIDIA

AllinMD Orthopaedics

Huawei Technologies Co., Ltd.

Chinadaas

Tencent

Meituan

BSH

DB Schenker China

Bank of China

Bank of Beijing

Bank of Nanjing

Shanghai Rural Commercial Bank

Qingxin Rural Commercial Bank

Keya Medical

Tongdun Technology

Fountainvest Partners

Guoxin Venture Capital

CCData

Flowserve

Fuli Technology

Xiaoyudian Small Loan

Dataseed

A.O. Smith (China) Water Heater Co., Ltd.

China Eastern Airlines

Greentown Ideal Life Technology Co., Ltd.

Keppel Land China

Terminus (Beijing) Technology Co., Ltd.

China Mobile Communications Group Co.,Ltd

China Mobile Communication Group Co., Ltd. Government-Enterprise Customer Branch

China Mobile Communication Group Co., Ltd., Beijing Branch

Yunnan Baiyao Group Health Products Co., Ltd

Feihe Dairy Co., Ltd.

Perfect diary

Vanke

Baohutong

CITIC Group

China Three Gorges Corporation

Work highlights

  • Advised Tencent on cybersecurity, data and personal information protection compliance regarding its key products and services.
  • Advised Daimler on its digital transition and data compliance management mechanism.
  • Advised Shanghai Rural Commercial Bank on its data compliance.

Anjie & BB Law Firm

AnJie Law Firm has been advising clients on data issues since Chinese regulations were in their nonage, and the firm continues to handle a wide variety of work on behalf of high-profile clients from numerous sectors. Typical services include compliance regimes, cross-border data transfers, protection of business secrets and the handling of personal data. Samuel Yang, in addition to leading the practice, is one of the market’s premier names in the field of telecoms; data protection forms a key part of his practice as he assists domestic and international clients such as DHL and AT&T on regulatory issues, data protection compliance regimes and commercial agreements.

Practice head(s):

Samuel Yang

Other key lawyers:

Yang Chen; Ning Zhou; Hongyu Jiang; Xiaochen He

Testimonials

‘ Samuel Yang is familiar with enterprise businesses, understands regulatory trends, and puts forward targeted opinions.’

‘AnJie Law Firm is highly experienced in data protection matters. They have a strong team led by Samuel Yang.’

‘Sam Yang is one of the leading figures in data protection and TMT related matters. Sam’s in-depth knowledge and previous in-house experience provides him with excellent commercial insight, which he shares and passes on to his clients.’

‘Very practical and precise with their advice and also strong insight into the local law issues.’

‘I have worked with Samuel Yang of AnJie and he is very responsive and understands the need of MNC clients within the operating environment in China.’

‘Samuel Yang is an excellent data protection lawyer and is very commercial and practical in his advice. He is familiar with data protection rules and practices of international companies. He is also able to provide constructive compliance opinions and suggestions for clients.’

‘Anjie’s data team has a good understanding of the operating rules of the insurance industry and knows well about client needs.’

‘Samuel Yang is a good business lawyer who is able to provide practical legal advice for clients to achieve their business goals. His knowledge on technology increases the pertinence and practicality of his legal services.’

Key clients

DHL

Microsoft China

SVW-Volkswagen

British Telecom

Tencent

Munich Re

AT&T

CASIO

China Life Property & Casualty Insurance

Swiss Re

YouKu

Work highlights

  • Advised Volkswagen on data protection issues.
  • Advised Tencent on data protection issues.
  • Advised China Life Property & Casualty Insurance on data protection issues.

Anli Partners

Anli Partners’ data practice sits within its TMT department and works with large domestic, state-owned and overseas clients on complex compliance projects, international data transfers and personal privacy procedures. Though many of the firm’s clients come from the TMT sector, the team also works with clients from other sectors such as hospitality, healthcare and energy. Former practice head Raymond Wang departed to Shihui Partners in November 2021.

Other key lawyers:

Wei Luo

Testimonials

‘Anli has professional lawyers and extensive experience on network security and data protection.’

‘With streamlined staff and better understanding of the trend of data compliance on the whole, the team led by Attorney Wang is able to answer clients’ questions based on their in-depth knowledge on laws and regulation.’

‘Luo Wei has a good understanding on the legislation of data compliance, which helps enterprises make more forward-looking judgements.’

‘The team has in-depth understanding of data security and privacy protection at home and abroad. They keep good interaction and engagement with relevant domestic legislative bodies.’

‘The team provide client-oriented solutions with good operability.’

Key clients

Tencent

Roche Diagnostics (Shanghai) Ltd

Unilever

Hyatt Hotels Corporation

Intercontinental Hotels Group

A.O. Smith

Fresenius Medical Care

BYHEALTH

Zhihu

K11

Lumi United

Yurogen

State Grid Corporation of China

Beijing Hyundai

Work highlights

  • Advised on the data protection compliance work of Tencent’s products.
  • Advised Unilever on a data compliance and digitalized transformation project.
  • Advising Fresenius Medical Care on data compliance.

DaHui Lawyers

DaHui Lawyers‘ data practice has developed from its pre-existing expertise in technology and telecoms sectors, and assists its clients with ensuring compliance with Chinese regulations and personal privacy issues. The group’s expertise in telecoms is demonstrated by its relationship with Comcast, which it advises on various issues relating to its Chinese operations. Founding partner Richard Ma  heads up the department; splitting his time between the Shanghai and Beijing offices, Ma also leads the TMT and M&A practices, making him the ideal practitioner to advise on the data aspect of corporate transactions. Joanna Jiang is another name to note and focuses on the telecoms, media, entertainment and healthcare industries.

Practice head(s):

Richard Ma

Other key lawyers:

Cloud Li; Joanna Jiang

Key clients

Airbnb

Alibaba Group Inc.

Ant Group

The Boeing Company

CBS Corporation

Cirium (Flight Global)

CloudFlare

Comcast Communications

Dulwich College

Elsevier Limited

Evernote Corporation

Haufe Group

Hewlett Packard Enterprise

Ideanomics

Intel

LexisNexis Legal Professional & Risk Solutions

Macmillan Publishers

NBC Universal

Netflix

Newegg

Princeton University Press

Reckitt Benckiser

Reed Business Information (RBI)

Reed Exhibitions

RELX Group

Research Square (AJE)

Samsung Electronics

Schaeffler

Springer Nature

Tencent

Tesla

Vonage

Warburg Pincus

Work highlights

  • Advised Cloudflare on the formulation and implementation of the strategy for deploying its state-of the art CDN, DDoS, etc. services in the China market.
  • Advised Elsevier on data protection regulatory issues.
  • Advised Comcast on various data privacy and cybersecurity matters.

Hui Ye Law Firm

Hui Ye Law Firm  has over a decade of experience advising on Chinese data regulations, and is capable of assisting domestic and international clients with the full spectrum of issues from implementing initial compliance procedures through to regulatory investigations and dispute resolution. Tianhang Li  and Ramon Huang  lead the Shanghai-based department; the former combines data expertise with experience in anti-fraud investigations and criminal defence, while the latter focuses primarily on network security and data compliance projects, working with high profile clients from various industries such as Alibaba, Toyota and Adidas.

Practice head(s):

Tianhang Li; Ramon Huang

Key clients

Alibaba

JD-DaDa

Farfetch (China)

Perfect World Co., Ltd.

Shanghai Big Data

ChinaReadingLimited

China Ping An

China Overseas Property Group

China Eastern Airlines

Chanel (China)

Work highlights

  • Assisted iHuman Education with establishing a comprehensive compliance system for children’s data protection.
  • Assisted Yum China with data compliance.
  • Helped Dada group to establish a e-commerce platform and data compliance system.

Llinks Law Offices

Llinks Law Offices‘ specialist data team, which sits within the corporate department, works with well-known clients from the automotive, tech and pharmaceutical sectors on all aspects of data protection, cybersecurity and e-marketing matters. David Pan leads the team; dual-qualified in New York and China, Pan is able to assist multinational clients with international compliance programmes and data transfer agreements. Xun Yang also has international expertise, having previously worked at a magic circle firm, and operates a broad practice that spans corporate and IP matters in addition to data protection.

Practice head(s):

David Pan

Other key lawyers:

Xun Yang

Testimonials

‘David Pan is experienced and capable.’

TransAsia Lawyers

TransAsia Lawyers advises a diverse range of clients on all areas of data protection law, but the group stands out for the strength of its work with overseas companies, often working alongside international law firms as PRC counsel on cross border transactions. In addition to transactional support, the department advises high-profile companies on regulatory issues; assisting Mastercard with on its China user data policy and compliance regime is a recent example of such work. Managing partner and TMT lead Philip Qu is the name to note in Beijing and advises on data matters as part of a wide-ranging practice that also includes M&A and VC investments.

Practice head(s):

Philip Qu

Other key lawyers:

Eric Johnson

Testimonials

‘The firm is specialized in laws and regulations on data protection.’

‘TransAsia is a top law firm in China. They not only have rich legal knowledge, but also an in-depth understanding of our business. Therefore, their feedback and suggestions are very practical.’

Key clients

Airbnb

Telstra

Niantics

Mastercard

HID

Dairy Farm

GOAT

AWS

Euromoney

Mayer Brown

Work highlights

  • Advised Mayer Brown as its regular PRC counsel on a variety of China data law compliance matters.
  • Advised Telstra on regulatory compliance issues.
  • Advised Airbnb on product and policy adjustments as a result of Covid 19.

Dentons China

As part of the firm’s international office network, Dentons China often works alongside overseas colleagues to assist multinational clients with data compliance regimes and international data transfers. Data specialist Kevin Cai leads the practice; Cai works with clients including ZTE, Alibaba and Tencent and combines his data practice with market-leading expertise in export controls and economic sanctions, particularly with regards to US-Chins relations.

Practice head(s):

Kevin Cai

Testimonials

‘Able to provide clients with legal services diligently and solidly, with diversified personnel composition, reasonable billing and innovative service mode.’

‘Kevin Cai gets good results quickly and efficiently.’

Key clients

Anker Innovation Technology Co., Ltd

Zhejiang Cainiao Supply Chain Management Co., Ltd.

China Merchants Holdings (Hong Kong) Co., Ltd.

China Three Gorges International Corporation

China Council for the Promotion of International Trade

Work highlights

  • Advised Anker on U.S. data security and data protection compliance.
  • Advised Zhejiang Cainiao Supply Chain Management Co., Ltd on compliance issues.
  • Advised China Three Gorges International Corporation on compliance issues.

FenXun Partners

FenXun Partners is a destination firm for a number of international clients, and the group provides support on a range of corporate transactions. In a recent example, the team advised Mastercard on the data privacy and cybersecurity aspects of its proposed joint venture with NetsUnion Clearing Corporation. Beyond transactional support, the team is also adept at assisting with compliance projects, employee privacy training and data transfer agreements.  Zhenyu Ruan leads the team in Shanghai, while Vivian Wu and Zhi Bao manage the Beijing practice.

Practice head(s):

Zhenyu Ruan; Vivian Wu; Zhi Bao

Work highlights

  • Advised Mastercard on China data privacy and cybersecurity law issues in relation to the bankcard clearing and settlement business of its joint venture with NetsUnion Clearing Corporation as licensed by the China central bank.

Haiwen & Partners

Haiwen & Partners has an impressive client portfolio, comprising of large multinational companies from the automotive, hospitality and insurance industries, as well as funds, which the department aids with data compliance projects.  Peng Fu, primarily an M&A lawyer, uses his additional expertise in IP to assist with data protection issues in the healthcare and TMT sectors. Jianyuan Yang advises on a broad range of data issues, including data breach responses and investigations by government regulators.

Practice head(s):

Peng Fu; Jianyuan Yang

Other key lawyers:

Dan Wu

Testimonials

‘Jianyuan Yang has a high degree of policy and regulation sensitivity and follow-up ability, as well as good capability in comprehensive judgement.’

‘The team is serious, responsible, professional and assists in a timely manner. They provide solutions and guidance for personal privacy and data protection.’

‘Haiwen’s data protection team is outstanding in understanding a professional and practical operation, is able to quickly provide a response to enterprise’s demands, provides data protection compliance plan and billing in line with the current situation of the enterprise according to the actual situation of enterprises and requirements.’

‘Jianyuan Yang has demonstrated excellent professional ability and communication skills. She is able to quickly and accurately find the key to the actual problems in enterprise operation, and give accurate, effective and practical legal advice to enterprises based on relevant laws and regulations, legislative trends and law enforcement practices.’

‘Haiwen combine legal and technology excellence with practical, commercial advice – essential in the China market, particularly in the data protection space. The team has an excellent understanding of the manner in which an MNC operates allowing them to deliver advice that needs no tailoring/ interpretation by the in-house team. The Haiwen team act as a true extension of our in-house legal department.’

‘We work most closely with Jianyuan Yang and Dan Wu – both of whom are incredibly responsive, technically excellent and adept at explaining complex advice articulately and clearly. I know I can rely on them both to understand our business, have excellent competitor intel/ market colour and deliver sensible, balanced well-thought-out advice.’

‘The team is professional on data compliance, providing timely feedback to client needs with efficient communication. Most importantly, they actively coordinate with other professional team resources of the law firm to solve complex and intractable problems if needed, and provide comprehensive and practical legal suggestions and solutions.’

‘Jianyuan Yang not only has a profound research and understanding on data compliance laws, regulations and practices, but also has a thorough understanding on the business and product characteristics of clients’ industries, and is able to provide professional data compliance solutions.’

‘The data compliance team of Haiwen is featured by its diversification. They work hard on corporate business, provide practical advice in the case of unclear laws. They have insight on the regulatory direction so as to help companies plan ahead.’

‘Jianyuan Yang has a thorough understanding of regulatory thinking of data protection in China. When providing legal advice, she can not only effectively solve practical problems, but also help the company to develop systems, processes and operational points conducive to long-term compliance based on the regulatory trend.’

Key clients

Daimler China

Beijing International Resort Co., Ltd.

CICC Capital

China Ocean Wide Fund

Xin Shixiang

VW-mobvoi Information Technology Ltd.

Beijing International Resort Co., Ltd.

Tk.cn Insurance CO.,LTD.

Work highlights

  • Advised Daimler China on data compliance.
  • Advised CICC Capital on the data protection aspects of a private equity transaction.
  • Advised Beijing International Resort Co., Ltd. on cybersecurity and data compliance.

HHP Attorneys-At-Law

HHP Attorneys-At-Law has demonstrable capability in all key areas of data protection, assisting with compliance projects, data breach responses, internal training and privacy policies. Through the course of 2020, the firm has been particularly busy helping clients secure and update their e-commerce offerings. Managing partner Yao Rao is the go-to practitioner, and handles data protection as part of a broad regulatory compliance practice that focuses on working with multinational companies in regulated industries such as healthcare, mining and construction.

Practice head(s):

Yao Rao

Other key lawyers:

Shuaijie Lu

Key clients

Asiwei Group

Blum

Brenntag

Centrotec

Diageo

Linked-F

Puma

RS Components

SKF

Spectris

Valeo

Work highlights

  • Advised a leading beverage alcohol provider on its establishment of a new system to break through its own member platform and other e-shops.
  • Advised a leading industrial manufacturer on the establishment of its own online selling platform.
  • Advised a leading industrial manufacturer on its overall assessment of data compliance against its online selling platform.

Jingtian & Gongcheng

Jingtian & Gongcheng is very capable in compliance projects and work with clients from the finance, healthcare, education and logistics sectors to ensure adherence with the latest developments in Chinese data regulations, as well as overseas regimes such as GDPR. Lizhi Yuan leads the practice and focuses solely on data protection work, though the group is also able to call upon the services of other partners in the dispute resolution and corporate departments.

Practice head(s):

Lizhi Yuan

Key clients

Ant Group Co., Ltd.

Work highlights

  • Advised Ant Group on data compliance.

Rui Bai Law Firm

As part of PwC’s global network, Rui Bai Law Firm focuses on working with international clients on multijurisdictional compliance projects. In addition to Chinese regulations, the firm also possesses expertise in GDPR requirements and is able to collaborate with other professionals in the PwC network to provide a full service to clients. Barbara Li leads the practice; having previously worked at an international law firm, Li is well-placed to advise on the data protection aspects of cross-border corporate transactions.

Practice head(s):

Barbara Li

Other key lawyers:

Sarah Xiong

Testimonials

‘The team not only provides legal advice, but also practical solutions.’

‘Barbara Li is one of the best privacy lawyers in China.’

‘Barbara Li is our long-term cooperative lawyer, has provided us with many constructive and forward-looking opinions and suggestions on hot issues such as data security and personal data protection.’

‘Barbara Li has extensive experience in the field of data security, especially data security compliance and data crisis handling. She is able to provide many constructive opinions and has a deep understanding of the data security needs of foreign companies.’

Yuanda China Law Offices

Yuanda China Law Offices has a capable data offering, with many of members of the team having previously worked in data-heavy industries such as network engineering. Leveraging the firm’s strategic cooperation agreement with Winston & Strawn, cross-border compliance projects are a speciality; the firm also works with a number of US and European companies on their operations in China. Carol Sun leads the team and works with TMT clients on cross-border data transfer assessment and national security issues. Leon Liu advises on white-collar and anti-corruption investigations in addition to data compliance.

Practice head(s):

Carol Sun

Other key lawyers:

Leon Liu

Work highlights

  • Advising Ant Group on privacy protection.
  • Advising ZTE on data compliance issues.
  • Assisting LVMH with a cross-border data transfer security assessment.