Data is closely linked to national sovereignty and security, as well as to the transformation and advancement of enterprises. Our data compliance experts are not only familiar with China's regulatory framework, but are also certified by International Association of Privacy Professionals (IAPP) as EU and U.S. privacy professionals. Our experts have a broad international perspective and insight into global policy trends. Additionally, we have actively delved into various business scenarios to aid enterprises in their digital transformation and growth, firmly believing that compliance is the foundation and development is the objective. With years of legal practice in this field, we possess extensive experience in data compliance across sectors such as finance, automotive, medicine and health, e-commerce, and TMT. Our team excels in blending innovative legal strategies with optimal compliance measures to navigate data regulatory challenges effectively. We specialize in offering tailored advice on complex regulatory issues and risk management, and we assist enterprises throughout the entire implementation process.
Our Services
For cybersecurity and data protection requirements under Chinese law and regulation, the EU’s GDPR, and the U.S. HIPAA/COPPA/CCPA regulations, our professionals offer the following services:
Legal
Draft and review legal documents such as privacy policies, data protection agreements, and cross-border data transfer agreement.
Prepare and evaluate agreements and business policies pertaining to the provision of internet products and services
Review and revise employment contracts and employee privacy statements
Provide legal advice on cybersecurity and data protection
Offer dispute resolution and litigation services for issues related to data infringement, contracts, antitrust, and unfair competition matters
Compliance
Draft and review data security management policies and guidelines
Draft and revise classification policies and procedures for data assets
Draft and review identification and impact analysis documents for data
Draft and review internal assessment documents on Critical Information Infrastructure (CII) identification
Risk Assessment
Facilitate self-evaluation in accordance with Cybersecurity Law
Facilitate self-evaluation regarding the impact of protecting personal information
Facilitate self-evaluation in cross-border data transfer
Assist in determining whether client acts as a data controller or processor and analyze the corresponding legal obligations under applicable laws and standards
Advise on remedial measures to fulfill regulatory obligations and reduce risk
GR/PR
Assist in establishing and maintaining long-term, trustworthy relationships with data protection authorities
Address data security incidents of incompliance
Create communication and coordination channels with relevant government agencies and key stakeholders
Swiftly report and communicate with supervising authorities and media platforms
Mitigate the impacts on business of negative media exposure
