Practice Areas / Data Protection & Privacy

Data Protection & Privacy

Practice Areas

The digital age provides new opportunities for global enterprises. With the increasing importance of data security in the world, many countries have adopted legislation to protect their citizens’ personal information and their own information infrastructure, and to supervise and control the cross-border transfer of sensitive data. In China, since the promulgation of the Cybersecurity Law in November 2016, the regulatory framework for cybersecurity and data protection has undergone tremendous changes; and China’s data protection and cybersecurity supervision are becoming increasingly stringent, with the promulgation of the Data Security Law and the Personal Information Protection Law in June and August 2021 respectively, and a series of regulations and national standards (including the drafts for comments) to tie in with the implementation of such laws. Any company which fails to adjust its business practices in time to meet the relevant legal requirements may face serious consequences, such as reputational damage, breach of data security, civil disputes, huge penalties, suspension of business and even criminal liabilities.


AnJie Broad has accumulated ample experience by providing comprehensive legal services in data protection and cybersecurity for MNCs, SOEs and local Chinese companies, and helping clients manage this increasingly significant risk. Our partners and lawyers have diverse business and legal backgrounds and can better respond to the needs of our clients. We help clients find a balance between legal requirements and business strategies, and adopt a comprehensive and systematic approach to deal with complex legal issues in this sector, providing practical operational guidelines and best practices for clients to achieve the ultimate goal of navigating the compliance risks. We also maintain a good and close cooperative relationship with relevant regulators and national/industry standard-setting organizations, which enables us to have insight into the legislative background and enforcement trends.

Scope of Service

AnJie Broad provides comprehensive legal services in data protection & privacy to clients, including without limitation:

• Data protection and cybersecurity compliance projects

• DPO services

• APP, applet, website compliance design review

• Privacy policy and data protection terms

• Cross-border data transfer compliance

• Employee data compliance

• Internet of Vehicles and autopilot

• Internet map service

• Big data

• Data center and cloud services (PaaS, IaaS, SaaS)

• Important data processing

• GDPR compliance of PRC enterprises

• Trade secret protection strategies

• Cybersecurity review

• Cybersecurity level protection

• Network product certification

•  Cryptographic product compliance

• Emergency response plan and implementation

• Cybercrime

• Government affairs and public relations

PROFESSIONALS