
The privacy and data security group at Morrison Foerster is based across China and Hong Kong and largely advises international clients on China’s data protection and privacy landscape. The team stands out for its experience in data breaches and security incidents as well as its sector expertise in financial services and life sciences. As a global practice, the firm is also well-versed in international data transfers. The practice is jointly led by Paul McKenzie, Chuan Sun and Gordon Milner, with McKenzie and Sun splitting their time between Beijing and Shanghai while Milner sits in Hong Kong and Singapore. McKenzie specialises in transactional matters involving licensing, sharing and handling of data, while Sun advises multinational corporations on data compliance, data breaches, localisation and issues relating to data export security assessments. Milner offers expertise in cross-border data matters, Gigi Yuen focuses on data privacy and data security issues, and associate Tingting Gao handles data protection and cybersecurity compliance.
Legal 500 Editorial commentary
Key clients
- Roblox/Luobu
Work highlights
Advising Roblox and Luobu on China’s privacy and data security matters relating to the ongoing operations of the Roblox online game platform.
Lawyers
Leading partners
The strongest partners in their field, leading on market-leading deals and endorsed by peers and clients alike.

Leading associates
Leading associates with regular involvement in their team's key work, and recognition from peers or clients as being ones to watch.
Practice head
Paul McKenzie; Chuan Sun; Gordon Milner
Other key lawyers
Gigi Yuen; Tingting Gao