Allen & Gledhill LLP advises on the gamut of data protection and cyber security matters, including access and commercialisation of data, the prevention of and preparation for cyber incidents, in addition to the response to and management of data breaches and incidents. Stanley Lai maintains a robust data management and cyber security advisory practice, with demonstrable experience representing clients in investigations undertaken by the Personal Data Protection Commission. Lai jointly leads the team alongside Eugene Ho, who acts for established businesses and start-up companies on the commercialisation of data, as well as pre- and post-cyber-attack cases, while Alexander Yap advises on compliance mandates and data breach management issues. Tham Kok Leong handles commercial arrangements relating to data protection and cyber security, and is another key contact in the group.

Bird & Bird ATMD LLP ‘provide practical and commercial advice’ on the full range of data protection and cyber security matters, from policies and governance frameworks to data breaches and high-stakes disputes. Managing partner Jeremy Tan leads the team and is regularly supported by Loren Leung, both of whom ‘provide excellent advice and are extremely responsive’.

Drew & Napier LLC’s dedicated practice showcases demonstrable experience in the development and implementation of data protection policies, frameworks and compliance programmes, in addition to cross-border data transfers, and data breaches and cyber security incidents. Standout work highlights include the team’s engagement by the Authority for Info-communications Technology Industry of Brunei Darussalam to assist with the development and implementation of Brunei’s personal data protection law and regulatory framework for the private sector. Noted for his extensive public sector expertise, Lim Chong Kin ‘provides valuable insights based on his experience working with policy makers and regulators’, and ‘runs a very efficient and tight ship’ alongside David Alfred, who maintains a track record in handling mandates concerning data and cyber governance.

Rajah & Tann Singapore LLP showcases stellar expertise in multi-jurisdictional data privacy projects, from compliance mandates to the management of data breaches, with additional experience in handling investigations launched by the Personal Data Protection Commission in Singapore. Rajesh Sreenivasan stands out for his prowess in data governance and cyber security matters, and Steve Tan advises on issues and reforms associated with Singapore’s data protection law. Sreenivasan and Tan jointly lead the team alongside Benjamin Cheong, who handles data protection compliance work. Lionel Tan is another key contact for matters concerning compliance programmes, while Justin Lee assists on a range of cross-border data privacy projects.

Baker McKenzie Wong & Leow provides an ‘effective and efficient service’ to its roster of clients on matters concerning data protection compliance and regulatory issues, privacy disputes and cross-border data transfers, in addition to data breaches. Splitting his time between the firm’s Singapore and Yangon offices, Andy Leck leads the team and handles a range of contentious and non-contentious data protection and cyber security mandates, often cross-border in nature. Ren Jun Lim is praised as a ‘problem solver who always stands ready to assist clients’ in the consumer goods and retail sectors, while ‘extremely knowledgeable and well respected’ Ken Chia is noted for his expertise in privacy and data breach cases in Singapore.

Well-placed to leverage the firm’s international footprint, the ‘outstanding team’ at Dentons Rodyk advises on domestic and cross-border matters concerning data protection compliance, regulatory proceedings, data transfers and data breaches. Gilbert Leong assists financial institutions, investment funds, healthcare providers, industrial companies and infrastructure providers in navigating data protection laws, while Maw Jiun Foo advises on data breaches and data protection impact assessments, in addition to developing data protection and compliance programmes. Leong and Foo jointly lead team, with other key contacts in the group including, Catherine Lee, who handles data protection compliance and regulatory matters.

WongPartnership LLP advises on domestic and cross-border projects involving issues concerning the Personal Data Protection Act (PDPA) and the European Union’s General Data Protection Regulation (GDPR), with additional expertise in data protection compliance and regulatory matters, data breach cases and enforcement claims. Key clients banks and insurers, as well as telecommunications, transport, media, hospitality, healthcare and property companies. Practice leader Lam Chung Nian showcases ‘high-quality expertise and experience’ in personal data protection mandates, while Kylie Peh advises on compliance issues.

Joyce A. Tan & Partners LLC assists with the development and drafting of privacy policies and contractual terms concerning personal data, with additional experience in data and cyber security breach incidents, and data protection compliance matters. Joyce Tan and Daniel Lim lead the team alongside Jeffrey Lim, who handles the implementation of cyber security compliance programs and regulatory frameworks.

A member of Osborne Clarke’s international practice, OC Queen Street handles a range of matters, from data protection compliance and regulatory mandates to cross-border data transfers, data breaches and the data protection aspects of corporate transactions. Practice leader Chia-Ling Koh handles PDPA-related matters and is regularly supported by Norvin Chan, who assists clients with data privacy issues.