The ‘prompt, efficient and responsive’ team at Allen & Gledhill LLP handles a broad range of data protection and cyber security mandates, from regulatory investigations and compliance projects to data breaches and cyber security incidents, among others. Stanley Lai jointly leads the team alongside Eugene Ho, who focuses on the commercialisation of data, pre- and post-cyber-attack cases, in addition to the data aspects of corporate transactions. Praised as a ‘knowledgeable partner with great experience’, Alexander Yap handles privacy compliance matters and data breach management issues, while Tham Kok Leong advises on a range of commercial agreements related to data protection, privacy and cyber security.
Data protection and cyber security in Singapore
Allen & Gledhill LLP
Practice head(s):
Stanley Lai; Eugene Ho
Other key lawyers:
Alexander Yap; Tham Kok Leong
Testimonials
‘The A&G data protection team is very prompt, efficient and responsive.’
‘Alexander Yap is a knowledgeable partner with great experience.’
‘They cover all the relevant areas of privacy and personal data protection regulations, from daily operations (updating privacy policy) to urgent situations (e.g. cyberattack and data breach).’
‘Eugene Ho is responsive and always helpful.’
Work highlights
- Acted as lead counsel for IP Investment (an international real estate private investment fund) and its client in a landmark case in personal data litigation.
- Advised DBS, as transaction counsel, on its acquisition of Citigroup’s consumer banking business in Taiwan, for an aggregate consideration equal to the business net asset value plus a premium of S$956 million.
- Advising the Government Technology Agency on Singapore’s national digital identity project and Singpass.
Bird & Bird ATMD LLP
The ‘robust and comprehensive’ practice at Bird & Bird ATMD LLP covers the full spectrum of data protection and cyber security mandates, from public policy mandates, assisting policymakers and regulators, to data breaches, cyber security incidents and high-profile disputes, among others. Key clients include leading technology corporations, Singapore blue-chip companies and financial institutions. Practice leader Jeremy Tan has ‘in-depth knowledge’, advising on regulatory and commercial issues arising in the data, cyber security, payments, metaverse, and IoT arenas, while Loren Leung handles multi-jurisdictional regulatory compliance mandates. Counsel Shawn Ting, who assists global operators with regulatory issues relating to the establishment of local presence and infrastructure rollout, including the deployment of data centres, is another key contact in the group.
Practice head(s):
Jeremy Tan
Other key lawyers:
Loren Leung; Shawn Ting
Testimonials
‘The legal advice provided was thorough, thoughtful, practical, and applicable. We were provided robust and comprehensive advice.’
‘Loren Leung was wonderful to deal with. She was a quick responder who ensured the quality of the output was high and consistent.’
‘The Bird & Bird data protection and cybersecurity practice is able to provide a one-stop worldwide and regional service to advise on data privacy and cybersecurity-related laws. They are effective in putting together a team of global experts to ensure consistency in advice and support.’
‘Jeremy Tan has in-depth knowledge of the privacy practices and developments in the region. He seeks first to understand the client’s business before providing pragmatic and effective solutions to approach complex issues.’
Key clients
Tencent
Work highlights
- Advised Tencent, a Chinese multinational technology and entertainment conglomerate, on a wide range of privacy, commercial and public policy matters across the APAC region.
Rajah & Tann Singapore LLP
Praised as ‘one of the top firms in Singapore’ for data protection and cyber security, Rajah & Tann Singapore LLP handles the full gamut of mandates, from regulatory investigations and compliance projects to data breaches and cyber incidents, including the drafting of response plans and policies. Data governance and cyber security expert Rajesh Sreenivasan
jointly leads the team alongside Steve Tan, who is commended as ‘one of the most eminent lawyers in the practice of privacy and data protection’, and Benjamin Cheong, who advises on data protection compliance matters. Lionel Tan, who ‘has demonstrated excellent insight and delivered practical and sound advice into data protection matters and breaches’, is another key contact in the group.
Practice head(s):
Rajesh Sreenivasan; Steve Tan; Benjamin Cheong
Other key lawyers:
Lionel Tan; Yang Tianzhou
Testimonials
‘The team’s connection with local authorities is extremely useful to understand the local legal requirements better.’
‘Steve Tan has deep knowledge not only in privacy law, but his connection with the PDPC and understanding of the privacy landscape in ASEAN is outstanding.’
‘Yang Tianzhou has assisted greatly with his professionalism and work ethic.’
‘Steve Tan has in-depth knowledge in this area. We know we are in good hands, and he is always responsive to our queries.’
‘Rajah & Tann has always been a cutting edge law firm when it comes to knowledge, technology, and the talents within the team. For privacy and data protection law, it is one of the top firms in Singapore.’
‘Steve Tan is one of the most eminent lawyers in the practice of privacy and data protection. His professionalism strives for perfection when managing client’s work.’
‘R&T’s data protection practice has deep practical and industry experience, especially in handling data protection matters and breaches.’
‘Lionel Tan has demonstrated excellent insight and delivered practical and sound advice into data protection matters and breaches, and how the regulators would react and deal with such relevant issues.’
Key clients
Sephora Asia Pte Ltd, Sephora Singapore Pte Ltd, Sephora Digital SEA Pte Ltd.
CEVA Logistics Singapore Pte Ltd
K+S Asia Pacific Pte Ltd
Pathology Asia Holdings
PersolKelly
Container Depot and Logistics Association (Singapore)
Rimowa
Pyramid Lines Singapore Pte. Ltd.
Starbucks Coffee Singapore Pte Ltd
Singapore Trade Data Exchange Services Pte Ltd (SGTradex)
Alliance for Action on Supply Chain Digitalisation
Nikkei Group Asia Pte Ltd
Coupang Corp
Bayer AG
PSA International Pte Ltd
MME Legal AG
Mediacorp Pte Ltd
XL Insurance Company SE, Singapore Branch
Orrick, Herrington & Sutcliffe LLP
Work highlights
- Provision of externalised Data Protection Officer Services to assist organisations in compliance with data protection obligations and provide guidance on handling and processing personal data.
- Assisting Bayer AG with the development and launch of highly innovative digital agriculture and sustainability initiatives across the Southeast Asian region.
- Assisting Starbucks Singapore with a data breach incident involving the personal data of over 330,000 Singapore residents.
Baker McKenzie Wong & Leow
Praised for its ‘professionalism, expertise, and unwavering commitment to delivering exceptional results’, Baker McKenzie Wong & Leow advises on cross-border data transfers and data protection compliance matters, in addition to privacy-related disputes. Andy Leck, who splits his time between Singapore and Yangon, leads the team and Ken Chia ‘provides practical advice’ on privacy and date breach cases. Ren Jun Lim offers ‘valuable insights and solutions to navigate complex challenges’ in the data protection and cyber security arena, while Alex Toh assists clients with digital product rollouts, in addition to digitalisation mandates and data-driven initiatives.
Practice head(s):
Andy Leck
Other key lawyers:
Ken Chia; Ren Jun Lim; Alex Toh
Testimonials
‘My overall impression of Baker McKenzie is exceptionally positive. Throughout my experience working with them, I have been consistently impressed by their professionalism, expertise, and unwavering commitment to delivering exceptional results. The firm’s legal practitioners possess a profound understanding of their respective fields, and their insightful advice and strategic guidance have proven invaluable.’
‘Alex Toh is an experienced partner.’
‘Ren Jun Lim’s dedication to our matter has been exemplary, consistently going above and beyond to ensure our needs are met. Ren Jun’s in-depth knowledge of his practice area has been evident in his strategic approach, providing us with valuable insights and solutions to navigate complex challenges.’
Dentons Rodyk
Commended for its ‘in-depth knowledge and expertise’, Dentons Rodyk advises on regulatory investigations and data protection compliance matters, in addition to cross-border data transfers, enforcement actions, data breaches and cyber security incidents. Gilbert Leong has demonstrable experience advising on matters concerning IT law, data protection and computer misuse, and jointly leads the team alongside Maw Jiun Foo, who handles data breaches, data protection impact assessments, and developing data protection and compliance programmes. Catherine Lee handles personal data compliance mandates, and Desmond Chew, who is praised as ‘experienced and knowledgeable beyond his years’, is another key contact in the group.
Practice head(s):
Gilbert Leong; Maw Jiun Foo
Other key lawyers:
Catherine Lee; Desmond Chew
Testimonials
‘I work very closely with Catherine Lee and Desmond Chew, who are both stand-out partners in this field.’
‘It is rare to find a team that is so comprehensive in terms of scope of practice in privacy and cyber security work, yet at the same time having in-depth knowledge and expertise. The team at Dentons is one of them. The team’s strength lies in their ability to deliver sound, commercially practical and correct advice that is useful for business stakeholders.’
‘Catherine Lee is sharp, quick in responsiveness and knowledgeable.’
‘The team is understanding of its clients’ concerns and approaches the legal issues with commercial sensitivity.’
‘Desmond Chew is experienced and knowledgeable beyond his years, has a strong handle on cutting-edge technology and delivers business-friendly and practical advice.’
Key clients
Jebsen & Jessen Pte. Ltd.
Persistence Technologies Pte. Ltd.
Work highlights
- Advised Jebsen & Jessen Pte. Ltd. on its data protection compliance program.
- Advised Persistence Technologies Pte. Ltd. on its data protection compliance program.
Drew & Napier LLC
‘Blending legal acumen with deep industry knowledge and technical expertise’, Drew & Napier LLC handles a range of data and cyber governance matters, from data transfer agreements, policies and governance frameworks to data breaches and regulatory enforcement mandates. Lim Chong Kin counts data protection regulators, multinational corporations driving the data arena and technology companies among his key roster of clients. Chong Kin jointly leads the team alongside David Alfred, who ‘possesses a deep understanding of the nuances and intricacies of data protection and can be relied on to provide sound advice and practical guidance at each stage of the matter’.
Practice head(s):
Lim Chong Kin; David Alfred
Other key lawyers:
Anastasia Su-Anne Chen
Testimonials
‘Lim Chong Kin and his team give realistic and practical advice for our engagement. They are able to provide effective solutions.’
‘Anastasia Su-Anne Chen’s subject matter expertise truly shines through when dealing with novel problems.’
‘David Alfred – critical thinking, solid drafting and excellent legal strategy.’
‘They have deep technical knowledge and understanding of how the privacy regulator in Singapore thinks. They also have technical expertise in-house which is helpful when dealing with data breaches.’
‘Lim Chong Kin always has his eye on the business side of the house and can always be depended upon to provide practical, down-to-earth advice.’
‘Their responsiveness, technical knowledge and practical advice are exceptional.’
‘This is an exceptional team that consistently delivers expert advice and client-centric service. One unique aspect of this team is that it blends legal acumen with deep industry knowledge and technical expertise. Not only do clients have access to data protection partners with a wealth of public sector and regulatory experience, we also can tap the brains of senior cybersecurity and privacy engineers.’
‘David Alfred possesses a deep understanding of the nuances and intricacies of data protection and can be relied on to provide sound advice and practical guidance at each stage of the matter.’
Key clients
Personal Data Protection Commission
Info-communications Media Development Authority
Authority for Info-communications Technology Industry of Brunei Darussalam
Marina Bay Sands Pte Ltd
Morinaga Milk Industry Co. Ltd
Lazada South East Asia Pte. Ltd.
DaVita Singapore Pte Ltd
Essilor International SAS
Clarins Pte. Ltd.
Work highlights
- Assisting the Authority for Info-communications Technology Industry (AITI) of Brunei Darussalam (Brunei) with the development and implementation of Brunei’s personal data protection law and regulatory framework for the private sector.
WongPartnership LLP
Counting multinational companies, listed corporations and government regulators among its key roster of clients, WongPartnership LLP advises on domestic and cross-border projects involving PDPA and GDPR issues, in addition to compliance matters, data breach incidents and enforcement actions. Praised for his ‘remarkable breadth and depth of experience’, Lam Chung Nian leads the team and handles projects involving the treatment and handling of customer and employee data across a range of sectors. Kylie Peh is another key contact in the group.
Practice head(s):
Lam Chung Nian
Other key lawyers:
Kylie Peh
Testimonials
‘Good client service and responsive. Flexible and willing to propose alternatives that work within the client’s budgetary constraints.’
‘WP’s team has a good understanding of data matters.’
‘Kylie Peh provides advice that is very commercial.’
‘The team is extremely competent in advising on the legal aspects of new and emerging technologies, as well as providing solutions.’
‘Lam Chung Nian has remarkable breadth and depth of experience and knowledge in this practice area. He is also very commercial-minded and excellent at offering solutions to meet clients’ needs.’
Key clients
Mayfair Equity Partners
Mars Veterinary Health
KrisShop Pte. Ltd.
Singapore Airlines Limited
JD Sports Fashion Pte Ltd
Work highlights
- Advising Mayfair Equity Partners as Singapore counsel in the acquisition of Access Partnership, advising the client on due diligence in respect of data privacy, intellectual property, cyber security and other technology matters.
- Advising Mars Veterinary Health on data protection due diligence in connection with the strategic acquisition of Gentle Oak Veterinary Clinic and Hillside Veterinary Clinic respectively.
- Advising KrisShop Pte. Ltd. on data protection related issues in connection with its strategic partnerships with: (i) various buy-now-pay-later platforms, in particular, ShopBack and Pace, to offer such payment options to its customers; and (ii) Shopback on KrisShop’s participation in the cashback programme.