The regulatory compliance and government enforcement practice at Fangda Partners continues to be a leading force in the data privacy, protection and cybersecurity space. The group is sought out by multinational corporations, international companies, domestic state-owned enterprises, and private companies in a wide range of sectors, from highly regulated industries such as banking and finance and life sciences to technology, automobile, energy and AI. It has assisted clients with cross-border data transfers, cybersecurity reviews, data breach responses and data compliance, amongst other matters. It also has particular expertise in data-related regulatory issues involved in transactions, financing and IPOs. Practice head Kate Yin, based in Beijing, Guangzhou and Hong Kong, is a go-to figure for government enforcement, internal investigation and data compliance matters. Gil Zhang sits in Shanghai and is well-versed in GDRP compliance projects and localising GDPR data protection programmes for international clients in China. Sherman Deng also advises clients from Shanghai on data governance, incident response and cross-border data transfers. Huihui Li and Jianqi Yang are noted for their focus on data privacy and are based in Beijing and Shanghai respectively.

Han Kun Law Offices’s top-tier data compliance and cybersecurity practice offers particular expertise in IPO-related cybersecurity reviews and is well-versed in handling sensitive data. The team has been active in supporting multinational corporations on cross-border data transfer (CBDT) security assessment applications, as well as other data compliance and data localisation matters. In Shanghai, Yan Wang assists with data-related issues in IP cases, David Tang is an expert in corporate compliance and data protection and Min Zhu is noted for his specialism in life sciences and healthcare sectors. Michelle Gon is also a key member of the Shanghai team and mainly advises multinational clients on cross-border compliance and regulation including anti-corruption and unfair competition matters. Data compliance specialist Kevin Duan sits in Beijing and is a go-to advisor for technology companies in the internet, automobile, AI and pharmaceutical sectors. The five aforementioned lawyers all co-lead the practice. Meanwhile, Shanghai-based Jun Li brings expertise in corporate-related data compliance issues.

Cross-border data transfers are the key focus of the cybersecurity and data compliance practice at King & Wood Mallesons, which advises a mix of multinational and domestic clients across the automobile, pharmaceutical, technology and medical device industries. The team is led by data compliance expert Susan Ning, who spits her time between Beijing and Sanya. She is well-versed in both data security law and personal information protection law matters and has a close relationship with Chinese regulatory authorities. In Beijing, Han Wu is sought after by multinational companies for data compliance issues and has also advised Chinese companies on operating in foreign countries.

With 'a deep understanding of the legal framework', Zhong Lun Law Firm‘s cybersecurity and data protection practice covers the full gamut of data protection, data privacy, and cybersecurity matters. On the data security and privacy side the team advises on localisation, cross-border data transfers, data breaches and creating enterprise data management systems. For cybersecurity, it aids clients with establishing compliance systems and incident response plans. The team is well-versed in GDPR compliance, protecting critical information infrastructure, and compliance related to cloud computing and big data, and aids clients from a number of sectors including automotive, manufacturing, internet and retail. Jihong Chen helms the team and advises multinational clients on cybersecurity and personal information protection. Peng Cai co-heads the practice and is a specialist in data protection and cybersecurity, advising on complex regulatory data issues and data security risks relating to AI, the internet and big data. Both practice heads are based in Beijing, while in Shanghai Jeffrey Liu combines his expertise in fintech and data protection to advise both domestic and international clients. Pulingling Xiao is noted for her experience in the data protection space.

The technology, data protection and cybersecurity group at AnJie Broad Law Firm is co-led by data protection experts Samuel Yang and Sunny Shen, who are located in Beijing and Shanghai, respectively. The firm has extensive experience in the data protection and cybersecurity space and continues to advise large multinational, international and domestic clients on a range of matters, including standard contract filings, data export issues, PIPL matters and cybersecurity compliance. Incident response to cyber attacks and leaks is also a pillar of the practice. Yang has sector expertise in telecoms, internet and IT and advises on a mix of issues from data localisation to data leaks and retention. Shen primarily advises TMT clients on regulatory compliance issues and has been supporting domestic companies with overseas projects.

As a TMT-focused firm, data protection and cybersecurity is a key part of DaHui Lawyers‘s offering. The team acts for domestic and international TMT clients and is well-versed in handling cross-border data transfers, security assessments and filing standard contracts. Practice head and founding partner Richard Ma splits his time between Beijing and Shanghai and excels in advising on complex transactions within the TMT sector. Shanghai-based Joanna Jiang is a key name to note in the data protection space as she offers expertise in building localised data protection systems, data compliance due diligence, and implementing data compliance systems. Zhengwei Yang advises on crisis management and investigations from Shanghai, while Dimitri Phillips assists foreign companies with China data protection matters from Beijing.

Global Law Office handles a range of inbound and outbound data protection and privacy matters for its diverse client base of financial institutions, major global corporations, governments, and non-government organisations. The team is well-versed in advising on compliance and regulatory matters including cross-border data transfers as well as data mapping and security. Practice head Maggie Meng leads the team from Beijing with ‘rich practical experience’ in the data privacy and compliance sector and has advised major foreign and domestic enterprises on personal information protection, regulatory requirements and data localisation. Shanghai-based co-head Vincent Wang has been supporting mainly domestic clients on international data protection matters. Also in Shanghai, Tim Yimin Liu is a go-to litigator for data privacy-related issues, while Alan Zhou focuses on advising life sciences and financial institutions companies on data protection matters.

Haiwen & Partners is praised for its ‘professionalism and innovation in the field of data compliance' and advises multinational, unicorn and state-owned companies on a myriad of data protection and privacy matters. The team supports clients in numerous sectors including internet and telecoms, e-commerce, finance and automotive. It has been active in AI-related matters over the last year, advising on potential data protection issues related to AI applications and models. The Beijing-based team is spearheaded by Jianyuan Yang, an expert in data compliance and data protection programmes, as well as data trading issues. Peng Fu is the go-to for TMT clients, acting on a mix of data and IP issues and leading on matters in the automotive industry. Dan Wu is noted for her knowledge of cross-border issues.

 

Hui Ye Law Firm‘s cybersecurity and data compliance practice is under the joint leadership of Shanghai-based data specialists Tianhang Li, Ramon Huang and Yuhang Shi. The group is noted for its data transaction projects involving the Shanghai and Shenzhen Data Exchanges. Huang has a wealth of experience advising on technology and telecoms-related data protection and privacy issues, while Li focuses on cybersecurity, anti-fraud investigations and criminal defence. Shi supports clients with a mix of data protection and IP issues, including assisting with cybersecurity regulations and inspections. Chengdu-based associate Dongdong Wei joined the firm in 2023 from W&H Law Firm, expanding the team's reach in Southern China.

Llinks Law Offices‘s Shanghai-based team advises on complex issues across data protection and cybersecurity, including responding to data incidents, cross-border data compliance and data security assessments. The group also assists with personal data privacy aspects in complex litigations. Dual-qualified in China and New York, department lead David Pan is especially active in matters involving both jurisdictions and is an expert in network security, data protection and antitrust matters. Xun Yang is well-versed in information security, privacy and unfair competition issues and mainly advises TMT, life sciences and financial service clients. Nigel Zhu focuses on supporting technology and internet companies with personal data compliance and cybersecurity assessments, while Susan Deng is key to assisting with cybersecurity and data compliance projects.

Dacheng centres its cybersecurity and data compliance practice around assisting largely domestic companies with data compliance regulation, implementation, and cross-border data transfers. The team sits within its TMT and digital business group and is well-versed in advising technology companies and high-tech enterprises. Practice head Kaiming Cai directs the team from Beijing and excels in acting for domestic companies in cross-border issues, especially in relation to China and the US. Pascal Jiang sits in Shanghai and advises investors on entering the Chinese market, including related data protection and compliance issues.

Data protection is a key part of the Beijing-based technology practice at DeHeng Law Offices, which is well-equipped to handle cross-border data transfers and security assessments. The 'highly professional' team is led by Yinan Wang, who maintains close relationships with Chinese regulators and is a member of numerous data committees. The group's dedication to cross-border data issues is shown through its involvement in assisting with policy research and drafting of cross-border data transfer relationships in relation to outbound data assessments. The unit has also been advising on data exit safety assessments and cybersecurity reviews. Co-head Tao Zhang handles IP and data-related compliance issues.

East & Concord Partners continues to advise clients on creating network security systems and implementing data compliance programmes and risk control systems. The team handles a mix of domestic and international clients and is especially well-versed in advising Japanese companies on cross-border issues involving Japan. Offering 'rich business experience', the Beijing-based group focuses on a number of sectors including finance and automobile, where it assists with sensitive data protection compliance issues. Peng Ye is key to digital transformation matters, advising on risk assessment and compliance issues. Ye jointly heads the practice with Xiaoyu Shen, who advises TMT, healthcare, automotive and retail sectors on data compliance and personal privacy protection.

FenXun Partners leverages its collaboration with Baker McKenzie to assist major multinational corporations and international companies with data privacy and protection matters related to entering the China market. The firm excels in advising on issues related to cyber security, data mapping, cross-border data transfers and security assessments. The practice is also adept at handling internal investigation matters and crisis responses. TMT specialist Zhenyu Ruan helms the team from Shanghai, managing data protection, privacy and cybersecurity issues for international clients. In Beijing, Vivian Wu leads the investigation and compliance practice and handles compliance investigations and training.

The Shanghai-based cybersecurity practice group at HHP Attorneys-At-Law assists consumer goods, industrial manufacturing, automotive and healthcare sectors on data compliance and privacy issues. The firm is a member of Meritas, a global legal service network, which allows it to advise on cross-border data protection matters. The team supports clients with risk assessments, compliance and establishing information security management systems. Team lead Yao Rao has ‘impeccable legal expertise and extensive experience in data protection‘, handling data management and IT system compliance as well as cyber-related due diligence. He is supported by associates Shihao Xiao and Shuaijie Lu.

Jingtian & Gongcheng advises on a range of data privacy, protection, data governance and cybersecurity issues, handling compliance audits, risk evaluations and programme management, as well as complex risk assessments. Cross-border data transfers and privacy policies are a key part of the practice. Lizhi Yuan operates between Shanghai and Beijing and is sought after by internet, big data, AI, and automotive companies looking for data protection advice. Yang Zhou spends time in both Beijing and Shenzhen, advising on data compliance for banking, insurance, real estate and gaming sectors as well as assisting with data security compliance for listings in Hong Kong.

Jincheng Tongda & Neal‘s 'highly professional' data protection group advises international and domestic clients on cybersecurity and data compliance matters from Beijing. The team is headed by anti-monopoly law specialist Guodong Zhang, whose practice encompasses sensitive data issues such as the use of children’s information. In Shanghai, Yunyun Zhang is instructed on both contentious and non-contentious issues.

JunHe‘s data privacy and cybersecurity practice advises multinational and domestic clients on data protection issues within China as well as developments in data privacy worldwide. The group's broad client base encompasses a number of industries, from manufacturing and consumer products to e-commerce and finance. Beijing-based practice head Marissa (Xiao) Dong focuses on data protection and digitalisation and has advised on a slew of PIPL issues in the last year. Carol Sun resides in Shanghai and excels in cross-border data transfers.

The data privacy team at Lifang & Partners sits within the antitrust and compliance department, which is co-led by compliance specialists Guanbin Xie, Annie Xue and Mark Hu from Beijing. The practice advises on issues across a number of sectors including pharmaceuticals, automotive and medical devices. Xue joined the team from GEN Law Firm in April 2024, strengthening its proficiency in cybersecurity and data protection matters.

International and domestic companies from finance, retail, technology and automobile seek out Merits & Tree Law Offices for assistance with data compliance policies and programmes, as well as setting up cross-border data transfers. The team is well-versed in data transactions, ensuring that these are compliant. Wenhao Chen is the key figure in the data privacy and protection practice and leads the team from Shanghai.

Shihui Partners's data compliance group specialises in data compliance issues related to M&As, securities, capital markets, and investments. The team advises major international companies and local clients on data compliance programmes and data mapping matters. The group also offers expertise in data-related issues involved with Hong Kong IPOs. Practice head Raymond Wang leads from Beijing and combines his knowledge in data protection and TMT to advise on complex data regulations and cybersecurity issues. Yihan Zang resides in Shanghai and focuses on corporate and data compliance, while Yang Liu is well-versed in cross-border data transfer risk assessments and IPO data compliance.

TransAsia Lawyers‘s 'very practical and commercial-minded' data protection and cybersecurity compliance practice is helmed by Beijing-based TMT specialist Philip Qu. Qu leads on data privacy matters and is a go-to counsel for clients looking for Chinese regulatory and data compliance assistance. The firm is noted for its involvement in cross-border data transfer matters and often collaborates with foreign law firms.

Zhao Sheng Law Firm‘s data protection team works closely with its strategic collaboration Linklaters's international data privacy group to advise major multinational and domestic clients on data privacy and protection issues. Based in Shanghai, the practice advises domestic clients on international data protection matters while providing foreign clients with expertise on data privacy laws and regulations in China. Richard Gu leads the team and advises on data privacy issues related to M&As and joint venture transactions. He is assisted by Colette Pan, who is an expert in advising technology and financial institution clients on data issues. Tiantian Ke specialises in data protection and cybersecurity and is key to regulatory and compliance matters.