Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

China’s Data, Cyber + Privacy Landscape: What You Need to Know Now

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

Session 1: Europe and U.S. East Coast (<a href="https://mofo.zoom.us/webinar/register/WN_6lbG55AgQMauorQ1KZarRw#/registration" target="_blank">RSVP</a>)Thursday, November 12, 2026 | 9:00 a.m. – 10:00 a.m. EST; 3:00 p.m. – 4:00 p.m. CET; 10:00 p.m. – 11:00 p.m. China Standard TimeSession 2: U.S. West Coast and Asia (<a href="https://mofo.zoom.us/webinar/register/WN_y2JKcgi3TqO4Qknoj6yMGw#/registration" target="_blank">RSVP</a>)Thursday, November 12, 2026 | 5:00 p.m. – 6:00 p.m. PST;Friday, November 13, 2026 | 9:00 a.m. – 10:00 a.m. China Standard TimeJoin us for a timely update on the latest developments shaping China’s data, cybersecurity, and privacy landscape.In this webinar, MoFo speakers Paul McKenzie, Gordon Milner, Marijn Storm, Chuan Sun, Marian Waldmann Agarwal, and Tingting Gao will unpack key regulatory and enforcement trends, including evolving cross-border data transfer requirements, data localization, “important data” guidance, the Cyberspace Administration of China’s differentiated approach to small-scale and large-scale data handlers, privacy and cross-border data considerations in the AI sector, and recent enforcement activity—including lessons from high-profile cases.What do these developments mean for businesses operating in China, and where are regulators focusing their attention?For More Information: contact <a href="mailto:lliang@mofo.com" target="_self">Luting Liang</a>Continuing Legal Education Credits: CLE/MCLE/CPD credits are pending.<hr>

China’s Data, Cyber + Privacy Landscape: What You Need to Know Now

Sign Up

Paul has more than 30 years’ experience advising leading international companies on complex transactional and other business law matters in China and elsewhere in Asia.He advises Fortune 100 and other global companies pursuing M&A, joint venture, and other corporate transactions, bringing to his work a deep understanding of the regulatory environment in China and a sensitivity to cultural issues in Asia. Paul also helps clients navigate China’s complex and changing regulatory environment, advising on a broad range of issues such as data privacy and security, industry permitting, and anti-corruption compliance. Paul is a member of the firm’s market-leading global data, cyber and privacy group and a recognized expert on China’s emerging data regulatory regime. He works across a broad range of industries, including information technology, real estate, chemicals and energy, and natural resources.Paul is a fluent Mandarin speaker and has written widely on issues related to Chinese law.He serves on the board of directors of The Morrison & Foerster Foundation, the firm’s charitable foundation.

麦保罗（Paul McKenzie）律师在代表领先的国际公司处理中国和其他亚洲地区的复杂交易和其他商业法律事宜方面拥有超过30年的经验。麦保罗律师代表财富100强企业和其他全球公司处理并购、合资和其他公司交易事宜，同时将他对中国监管环境的深入了解，以及对亚洲文化问题的敏锐运用于其中。他还帮助客户应对中国复杂且不断变化的监管环境，并就各类问题（例如数据隐私与网络安全，行业许可和反腐败合规）提供咨询。麦保罗律师还是本所市场领先的全球隐私和数据安全业务组的成员之一，也是中国新兴数据监管制度领域公认的业内专家。麦保罗律师的业务涉及广泛的行业，包括信息技术，房地产，化学品，能源和自然资源。他精通汉语，并针对中国法律的相关问题广泛撰文。麦保罗律师是本所的慈善基金 “美富基金会”的董事会成员。

Paul McKenzie

Partner

Gordon focuses his practice on advising clients about intellectual property, licensing and publishing, on-line regulations, AI, cybersecurity and data, and technology transactions.He has advised clients in the video game, on-line services, fintech and IT industries on a wide spectrum of technology-related matters. His practice ranges from the cutting edge, for example helping Roblox become the first foreign online game platform with user-generated content and revenue-sharing to obtain a government license in China, and the worldwide roll out of a cloud-based AI platform for large dataset machine learning to major projects, such as the establishment of the entire technology infrastructure for a new national PRC bank.Gordon has particular experience in cross-border commercial technology transactions in Asia and has worked with clients on a variety of projects, from traditional technology transfer arrangements to complex collaborative development relationships. He also has substantial experience in providing intellectual property, regulatory, and operational technology law advice to clients in mainland China, Hong Kong, and the Asia-Pacific region.He is a frequent writer and speaker on AI, technology transfers, intellectual property rights, and data privacy, and has delivered lectures to regional governments and industry bodies in Asia. Gordon also has extensive experience with open-source software and is an active participant in public debates involving government and major players in the tech industry.Gordon served as vice chair of the Technology Law Committee of the Inter-Pacific Bar Association. He has lived in Hong Kong since 2001 and previously practiced in London.

Gordon Milner律师专注于为客户提供知识产权、许可、外包和技术交易领域的法律咨询服务。Milner律师曾为信息技术、电信、金融、制造、能源和生命科学行业的客户提供过广泛的技术相关事宜的法律服务。他的业务范围包含为中国一家新成立的全国性银行建立全套技术基础设施等重大项目，到为一家全球鞋业公司在新加坡建立一个新的外包设计、制造和物流系统。Milner律师在处理亚洲地区的跨境商业技术交易方面尤为经验丰富，他曾为客户提供从传统的技术转让安排到复杂合作开发关系等一系列项目的咨询服务。他在为中国大陆、香港和其他亚太地区的客户提供关于知识产权、监管和运营技术的法律咨询方面，也拥有丰富的经验。Milner律师经常就技术转让限制、加密、知识产权和数据隐私撰文和发表演讲，并曾为亚洲地区的政府部门和行业团体举办讲座。他在处理开放源代码软件事宜方面同样经验丰富，同时也积极参与涉及政府部门和技术行业主要参与者的公开辩论。Milner律师曾担任泛太平洋律师协会（Inter-Pacific Bar Association）技术法律委员会的副主席。他自2001年迁居香港，此前在伦敦执业。

Gordon Milner

Marijn Storm focuses his practice on artificial intelligence regulation and emerging technology law, advising at the intersection of data protection, cybersecurity, and AI law.Based in Morrison Foerster’s Amsterdam office, Marijn counsels global technology companies, multinational corporations, and semi-governmental organizations on AI governance and compliance. He also advises clients on the design of responsible technology frameworks and their most complex privacy and data security challenges. Clients particularly value Marijn’s pragmatic approach and technical knowledge, which enable him to deliver practical, actionable solutions to their most pressing issues.Marijn has significant experience with the EU AI Act and its interplay with existing privacy, product safety, and cybersecurity frameworks. He regularly assists clients with AI governance architectures and risk-classification, post-market monitoring strategies, AI content marking and labelling obligations, and the negotiation of AI terms. Marijn also advises and trains boards, in-house legal teams, and technical teams on implementing AI and other advanced technologies in compliance with legal requirements. His work includes generative AI, behavioral biometrics, and IoT.Marijn also counsels clients on investigating and responding to major cybersecurity incidents. He has assisted multinational companies in obtaining regulatory approval for their Binding Corporate Rules in both the EU and the UK. Marijn also represents clients in complex data protection litigation, including the defense of one of the largest-ever class actions in the Netherlands relating to alleged GDPR violations.A recognized thought leader, Marijn regularly speaks at international data protection and AI conferences on topics such as AI governance, the ethical application of AI, and training EU-compliant AI models. He has authored articles for IAPP, Law360, and Corporate Compliance Insights, including on the EU AI Act Code of Practice, employee AI use, and the intersection of data privacy and AI in life sciences. Marijn has also played a leading role in developing <a href="/artificial-intelligence" target="_self">MoFo’s AI Resource Center</a>, a free online resource providing links to enacted AI laws, regulations, and guidance in 55 countries, including the United States at the federal and state levels. Since 2019, Marijn has served as an annual guest lecturer at the Tilburg Institute for Law, Technology, and Society, where he teaches Algorithmic Accountability as part of its AI & Law course.Marijn is a Dutch-qualified lawyer and is fluent in Dutch and English.

Marijn Storm

Chuan Sun is Managing Partner of the Shanghai and Hong Kong offices.Chuan focuses his practice on cross-border M&A transactions; sophisticated technology, media, and telecom (TMT) transactions; and complex IP/commercial matters across Greater China.With more than 20 years of experience in both Asia and the U.S., Chuan regularly advises multinational corporations, state-owned enterprises, private companies, and PE/VC firms in complex cross-border M&A transactions, joint ventures, strategic alliances, and business separation transactions.Chuan has extensive experience in complex corporate-commercial and technology transactions across the Fintech, e-commerce, and broader TMT sectors. His work covers payment technology, eKYC, credit technology, blockchain, e-platform arrangements, R&D, co-development, technology collaborations, and IP licensing. He also advises on strategic outsourcing, manufacturing, distribution, supply, and franchising arrangements across various industries.Chuan regularly counsels clients on cutting-edge technology and IP regulatory matters, including Fintech, data privacy, cybersecurity, data localization, cross-border data transfers, cloud computing, telecommunications, telematics, and third-party payment services.Prior to joining MoFo, he worked in the Hong Kong office of a Magic Circle firm and the Chicago office of another leading international firm.Chuan co-authored the Hong Kong & mainland China chapters of Getting the Deal Through – Telecoms and Media, 2014, 2015 & 2016; the Hong Kong & mainland China chapters of Getting the Deal Through: Market Intelligence – Telecoms and Media, 2015; and the Hong Kong chapter of Sourcing World 2nd Edition 2015.Chuan is fluent in Mandarin and English.“Chuan Sun has a wealth of knowledge on his clients’ existing products and services offerings and a good understanding of what terms they are or are not willing to accept. This helps tremendously with contract negotiations.”“Chuan Sun has extensive experience in the technology space. Many other competitor firms in the technology space are not really pure IT lawyers, as they are more focus on privacy and trade marks or other related fields, as opposed to technology contracts such as SAP or Microsoft software license agreements. A normal general commercial lawyer would not be able to identify the same issues or raise the right questions, as they are not equipped with the technology know-how of the products and services, their benefits, and general industry standard terms and trending patterns in the market.” Legal 500 Asia Pacific 2020<h4>Representative Experience:</h4><ul><li>CPE, a Chinese alternative investment firm, in connection with its US$350 million joint venture with Restaurant Brands International (RBI), one of the world's largest multinational fast food holding company, to operate Burger King in China which has around 1,250 restaurants in total. This transaction is one of the most significant private equity-led transactions in China’s consumer sector in 2025.</li><li>OcuMension Therapeutics (HKSE: 01477), a Hong Kong Stock Exchange listed ophthalmic pharmaceutical platform in China in its acquisition of substantial assets valued at HK$1.28 billion (approximately US$165 million) from Alcon Inc., a global leader in eye care. The transaction involves asset purchase, global license, transition services and manufacture and supply arrangement and constitutes a very substantial transaction of OcuMension.</li><li>Ascendent Capital Partners in its US$1.66 billion privatization of Hollysys Automation Technologies Ltd. (NASDAQ: HOLI), a leading international automation control system solutions provider. This is a rare transaction where a PE fund successfully acquires a US-listed Chinese company without forming a consortium with controlling shareholder or management. It is also the first and only U.S. take-private of a BVI-incorporated company involving a dissenter process. </li></ul><ul><li>Leading Global, China-Headquartered Fintech Company. Advise the company in connection with its first provision of blockchain and Real World Asset solutions in the fintech industry to a leading Chinese securities company for the latter’s first launch of structured product tokens, enabling secure, transparent, tamper-proof transactions for fixed-income and principal-protected tokenized products linked to US equity ETFs.</li><li>Leading Global, China-Headquartered Fintech Company. Advise the company in connection with the international expansion of its various business operations that are based on cutting-edge technologies, including blockchain and crypto, into multiple jurisdictions. </li></ul>

孙川是美富上海办公室和香港办公室的管理合伙人。孙川律师的执业领域集中在大中华区的跨境并购交易，复杂的技术、媒体和电信(TMT)交易以及复杂的知识产权/商务事宜。孙律师在亚洲和美国有20多年工作经验，他经常代理跨国公司、国有企业、私人企业和私募股权/风险投资机构处理复杂的跨境并购交易、合资、战略联盟和业务拆分等交易。孙律师在战略性的公司商务和技术交易方面也拥有极为丰富的经验，包括外包、制造、分销、供应与特许经营安排，以及跨行业知识产权许可安排等。他在TMT和知识产权监管方面的经验包括电信、电子商务、互联网、网络安全、数据隐私、云计算以及车联网。在加入美富前，孙律师在一家 “魔法圈”律所(Magic Circle)的香港办事处和另一家领先的国际律所的芝加哥办事处工作。孙律师与他人合著了2014，2015和2016版《让交易推进下去––电信与媒体》(Getting the Deal Through – Telecoms and Media)中的香港和中国大陆章节，2015年版《让交易推进下去：市场情报––电信与媒体》(Getting the Deal Through: Market Intelligence – Telecoms and Media)中的香港和中国大陆章节，以及2015年《采购世界》第二版(Sourcing World 2nd Edition)的香港章节。2018年《亚太法律500强》指出“孙川律师十分高效、负责和实际。他非常擅长处理IT协议，包括软件许可和IT采购合同的相关事宜。他也十分善于处理跨境TMT交易。”孙律师精通普通话和英语。<h4>具有代表性的交易 </h4><ul><li>代表中国另类投资公司CPE源峰 就其与世界上最大的餐饮公司之一餐饮品牌国际集团（Restaurant Brands International，简称 RBI）成立价值3.5亿美元的合资企业。该合资企业将负责汉堡王在中国的运营，目前在全国拥有约 1,250 家餐厅。本次交易是 2025 年中国消费行业中由私募股权基金主导的最具代表性交易之一。</li><li>代表香港上市的中国眼科制药平台欧康维视生物医药(HKSE: 01477)处理其收购全球眼科护理领域的领导者爱尔康公司价值 12.8 亿港元（约 1.65 亿美元）重大资产的事宜。交易涉及资产收购，以及全球许可、过渡期服务、生产和供应安排等，是欧康维视的一项非常重大交易。</li><li>代表上达资本处理其以16.6亿美元对和利时自动化技术有限公司（纳斯达克证券交易所股票代码：HOLI）进行私有化事宜。和利时是一家领先的国际自动化控制系统解决方案提供商。这是一宗罕见的交易。在这宗交易中，私募股权基金在未与控股股东或管理层组建财团的情况下，就成功收购了在美国上市的中国公司。这也是首宗且唯一一宗涉及异议股东程序的，在英属维尔京群岛注册成立的公司的美国上市公司私有化交易。</li><li>代表一家总部位于中国的全球领先金融科技公司首次为金融科技行业提供区块链及现实世界资产（RWA）解决方案，协助一家中国头部证券公司首次发行结构化产品代币。该方案为挂钩美国股票ETF的固定收益及保本型代币化产品提供了安全、透明且防篡改的交易支持‌。</li><li>代表一家总部位于中国的全球领先金融科技公司处理基于区块链和加密货币等尖端技术开展的各项业务在多个司法管辖区进行国际扩张的事宜。</li></ul>

Chuan Sun

Managing Partner, Shanghai and Hong Kong

Marian Waldmann Agarwal is a partner in the Data, Cyber + Privacy Group at Morrison Foerster. She also co-leads the firm’s Artificial Intelligence Group and is a member of the global Environmental, Social, and Governance (ESG) Responsible Tech Committee. Marian’s unique blend of business and legal skills, honed through her background in information systems and business management, is a key asset in her role. Her in-house experience as a secondee to two different companies has provided her with firsthand knowledge of the internal business needs required for company initiatives to succeed. Marian has been instrumental in advising global clients on the developing field of AI. Clients seek her guidance due to her extensive understanding of, and experience with, the ethical use of AI and the developing legal compliance requirements, including data privacy and regulatory provisions, in connection with the design and implementation of innovative AI tools. Her work extends to helping clients identify and mitigate the potential risks associated with AI technologies. In connection with this work, Marian has played a leading role in the development of <a href="/artificial-intelligence" target="_self">MoFo’s AI Resource Center</a>, a free online resource providing links to enacted AI laws, regulations, and guidance in 55 countries, including the United States at the federal and state levels. A recognized authority in AI governance, she was named to the IAPP’s AI in Legal Services Advisory Board, joining a select group of leaders guiding its Legal AI Initiative as AI transforms the delivery, governance, and practice of legal services.Marian counsels clients across a range of industries, including technology, finance, consumer goods and services, healthcare, insurance, media, and hospitality. She assists in designing and building their privacy programs, advising on compliance with U.S. and foreign privacy and data protection laws, such as the California Consumer Privacy Act (CCPA) and the EU’s General Data Protection Regulation (GDPR). Her work includes drafting internal policies, procedures, and guidelines for legal and non-legal audiences that incorporate privacy best practices and legal requirements in daily operations. One of Marian’s core strengths is her ability to comprehensively assess and improve privacy programs, and ensure they remain compliant with evolving privacy laws and regulations. She also drafts and negotiates contracts to protect clients’ data in key commercial agreements, advises on cross-border data transfer issues, and assists with completing multijurisdictional surveys of privacy obligations.In addition, Marian uses her privacy, data security, and AI implementation skills to provide pro bono counseling services to a variety of non-profit clients.Marian received her J.D. from University of Pennsylvania Law School in 2004 and her B.S. and M.B.A. from the State University of New York at Buffalo in 1999. Prior to attending law school, she worked as an application specialist for a small software company.

Marian A. Waldmann Agarwal

Tingting is a member of Morrison Foerster’s preeminent Data, Cyber + Privacy practice and she advises on a diverse range of privacy, data protection, and cybersecurity compliance issues relevant to China across a wide spectrum of industries. Tingting has a deep understanding of, and extensive experience advising on, China’s fast evolving data regulatory regime.Tingting also helps clients with other regulatory compliance advisory matters, including TMT, AI, as well as labor and employment.Prior to joining Morrison Foerster, Tingting worked as an associate in a China joint operations office of a leading international law firm.Tingting is fluent in Mandarin and English.Tingting is designated as a Certified Information Privacy Professional (CIPP/Europe) by the International Association of Privacy Professionals (IAPP).<h4>Representative Experience</h4><ul><li>A multinational advanced-technology conglomerate corporation in regulatory and data protection compliance in China, including significant assistance to the client in successfully passing a provincial CAC’s review of its consolidated data export application that covers dozens of affiliates in China.</li></ul><ul><li>A multinational financial services corporation and bank card clearing brand in significant China and APAC regional data protection compliance strategies as well as general corporate matters.</li><li>A multinational auto brand as well as its financial leasing business segment in an extensive China data protection compliance review of country operations and data governance and strategies.</li></ul><ul><li>A leading global professional services company in an in-depth review of compliance with China’s revised national security and data security regimes and formation of compliance strategies.</li><li>A membership-based warehouse store in regulatory and data protection compliance in China, including significant assistance to the client in its consolidated data export application that covers all subsidiaries in China.</li><li>A multinational financial services corporation in regulatory and data protection compliance in China, including significant assistance to the client in its data export applications.</li><li>A foreign-invested telematics business in regulatory and data protection compliance in China, including significant assistance to the client in reaching agreements with auto brands on the treatment of vehicle data after expiry of telematics services.</li></ul>

高律师是美富久负盛名的隐私与数据安全（Data, Cyber + Privacy）业务组的成员。她协助客户处理与中国相关的隐私、数据保护以及网络安全合规等各类法律事宜，涉及的行业领域非常广泛。高律师对中国快速发展的数据监管制度有着深刻的理解，并在此方面拥有极为丰富的执业经验。高律师亦协助客户处理各类其他合规监管及咨询事宜，包括技术、媒体和电信（TMT）、人工智能以及劳动与雇佣。在加入美富之前，高律师曾是一家领先国际律所的中国联营办公室的律师。高律师精通普通话与英语。高律师是IAPP（International Association of Privacy Professionals）认证的欧盟信息隐私专家（Certified Information Privacy Professional/Europe）。<h4>具有代表性的项目 </h4><ul><li>代表一家跨国高科技企业集团处理其中国监管和数据保护事宜，包括协助客户顺利通过省级网信部门对其涵盖数十家在华关联公司在内的数据出境申请的审查。</li><li>代表一家跨国金融服务公司和银行卡清算品牌处理中国和亚太地区重要的区域性数据保护合规策略以及一般公司事宜。</li><li>代表一家跨国汽车品牌及其融资租赁业务部处理针对中国运营所进行的广泛的中国数据保护合规审查以及就数据治理和策略提供法律意见。</li><li>代表一家全球领先的专业服务公司深入评估其对中国新近修订的国家安全与数据安全相关法律的遵守情况，并提出合规策略。</li><li>代表一家会员制仓储量贩卖场处理其中国合规和数据保护事宜，包括为涵盖客户全部在华子公司在内的数据出境申请提供协助。</li><li>代表一家跨国金融服务公司处理其中国合规和数据保护事宜，包括协助其数据出境申请。</li><li>代表一家外资车联网公司处理其中国合规和数据保护事宜，包括协助客户与车企就车联网服务到期后的汽车数据处理事宜达成协议。</li></ul>

China’s Data, Cyber + Privacy Landscape: What You Need to Know Now

12 Nov 2026