CMS‘s data privacy practice sits within its wider TMT and M&A group and assists major international TMT clients with their data-related issues in China. The group often advises on cross-border issues such as data transfers and is well-versed in handling sensitive data. Ulrike Glueck co-leads the team from Shanghai and is an expert in data compliance-related issues. Fellow practice head Jonathan Chu operates from the Beijing and Hong Kong offices and focuses on data protection and cybersecurity matters. Panpan Tang resides in Shanghai and is key to assisting with privacy policies and data-sharing contracts, while Kelly Chen offers expertise on policy developments within data protection from Beijing. Nick Beckett retired from practice in 2024.

The privacy and data security group at Morrison Foerster is based across China and Hong Kong and largely advises international clients on China’s data protection and privacy landscape. The team stands out for its experience in data breaches and security incidents as well as its sector expertise in financial services and life sciences. As a global practice, the firm is also well-versed in international data transfers. The practice is jointly led by Paul McKenzie, Chuan Sun and Gordon Milner, with McKenzie and Sun splitting their time between Beijing and Shanghai while Milner sits in Hong Kong and Singapore. McKenzie specialises in transactional matters involving licensing, sharing and handling of data, while Sun advises multinational corporations on data compliance, data breaches, localisation and issues relating to data export security assessments. Milner offers expertise in cross-border data matters, Gigi Yuen focuses on data privacy and data security issues, and associate Tingting Gao handles data protection and cybersecurity compliance.

Reed Smith LLP‘s 'very competent and knowledgeable' data protection and cybersecurity practice advises on a mix of contentious and non-contentious data privacy and protection issues. The team supports clients from early to late project stages, including data management and protection, collecting personal information, handling and transferring data, as well as dealing with potential data breaches and cybersecurity issues. It is well-versed in cross-border data transfers and assists multinational and international clients across a wide range of industries. Beijing-based practice head Barbara Li is a specialist in data privacy and cybersecurity matters. Amy Yin assists with day-to-day data protection matters from Shanghai and Hong Kong, while Sarah Xiong is knowledgeable on regulatory compliance and sits in Beijing.

International clients seek out Baker McKenzie FenXun for its advice on cross-border data transfers, cybersecurity and Chinese data protection law. The team comprises of IP, technology and disputes experts who are well-versed in data protection issues. Practice head Zhenyu Ruan assists the team from Shanghai and is key to both data privacy and cybersecurity matters. Co-leads Isabella Liu, Lex Kuo and Gary Seib are all based in Hong Kong, with Kuo advising technology companies on data-related issues in transactions and Seib handling commercial disputes.

Bird & Bird‘s data protection and privacy practice is led by Beijing-based James Gong, who specialises in advising international and Chinese clients on regulatory data protection issues. The team has been active in assisting clients with issues relating to the Personal Information Protection Law (PIPL) and Data Security Law (DSL), and often advises on data compliance, data localisation and security assessments. The group is also experienced in supporting clients with cross-border matters and is well-versed in PRC, EU, UK and Hong Kong law.

Led out of Shanghai, the data protection and cybersecurity team at Linklaters is led by newly promoted partner Alex Roberts. The department advises clients on compliance with the General Data Protection Regulation (GDPR) and China’s Personal Information Protection Law (PIPL) and assists with compliance audits and policy reviews. It has also been active in supporting clients with data transfers in a number of highly regulated sectors such as finance. Roberts was key in developing an automated tool that helps to create semi-automated China standard contracts for cross-border transfers. He is well-versed in regulatory data protection and cybersecurity issues.

Hogan Lovells International LLP‘s privacy and cybersecurity practice utilises its expertise in Hong Kong data protection matters to advise international and Hong Kong clients on data protection issues in mainland China. The firm has a strong international presence and often advises clients on multi-jurisdictional data compliance. Sherry Gong supports the team from Beijing and assists with implementing data privacy and cybersecurity compliance programmes. Data protection expert Mark Parsons leads from Hong Kong and is assisted by Tommy Liu, who focuses on data protection issues related to transactions and gives ‘consistently high-quality legal advice’.

Latham & Watkins LLP advises both domestic and international clients on China’s data protection laws, ensuring that clients remain compliant. The team handles major data and technology transaction and is experienced in assisting clients with product launches, ensuring that these are data-compliant. Hui Xu is based in Beijing and excels in litigation matters, supporting clients with regulatory investigations, enforcement and compliance.

Praised for being 'particularly professional in the field of data compliance', Simmons & Simmons‘s technology, media and telecoms team is adept at handling data protection and cybersecurity matters for its domestic and international client base. Jingyuan Shi leads the team from Shenzhen and advises technology companies, financial institutions and life sciences companies on non-contentious data protection, privacy, and governance matters.