PRACTICES

To maximize the protection of your legitimate rights and interests
JINCHENG TONGDA & NEAL
DATA COMPLIANCE AND PRIVACY PROTECTION
OVERVIEW

To meet the rapidly growing legal service demands of clients in the areas of cybersecurity and data compliance, JT&N integrates the existing industry experience of the entire firm and can provide high-end comprehensive legal services for domestic and foreign clients in cybersecurity, corporate data governance, data compliance system construction, cross-border data transmission, data lifecycle management, APP data compliance, business overseas data compliance, privacy protection, personal information protection disputes, regulatory responses, etc. At the same time, in conjunction with the client's actual business circumstances and development needs, we assist the company in identifying risk priorities, providing corresponding solutions, and helping to formulate effective optimization measures, so as to build lasting compliance capabilities for clients.

SERVICE

Establishment of Data Compliance Governance System

  • Information Protection Differentiation Analysis

  • Internal Investigation and Optimization

  • Regular Compliance Assessment

  • Information Classification and Grading

  • Compliance System Construction

  • Emergency Handling and Legal Advice

Data Storage and Cross-border Transmission

  • Compliance Assessment for Data Outbound and Transmission Plan Formulation

  • Data Outbound Identification

  • Compliance Advice on Data Storage

  • Data Outbound Security Assurance Capacity and Risk Assessment

  • Data Outbound Safety Assessment (Including Self-assessment and Reporting Assessment Assistance)

  • Assistance in Certification of Cross-border Personal Information Processing Activities

  • Preparation of Standard Data Cross-border Transmission Contract

Full-cycle Compliance Services for Commercial Use of Personal Information

  • Compliance Implementation for Public Disclosure, Joint Processing, and Delegated Processing of Personal Information

  • Construction of Processing Rules for Sensitive Personal Information  

  • SDK Compliance Management

  • Data Source Compliance Management

  • Assessment of Illegal Collection and Use of Personal Information

  • Drafting and Amendment of Privacy Policies and Documents

Cybersecurity

  • Cybersecurity Review Response

  • Vulnerability Identification and Improvement Suggestions for Cybersecurity

  • General Consultation and Testing Certification Assistance for Grade Protection CII/CIIO

  • Assistance in Identification and Compliance Implementation

  • Cybersecurity and Access Compliance Advice

  • Development of Cybersecurity Emergency Plan

  • Emergency Handling and Legal Advice for Cybersecurity Incident

Others

  • Internal Training on Various Data and Cybersecurity Issues

  • Preparation of Specialized Reports on Various Data and Cybersecurity Issues

DEALS

  • Represented a leading e-commerce platform in disputes with users regarding personal information access and copy rights

  • Provided comprehensive data security and personal information protection legal services for a well-known international bank card clearing organization

  • Provided specialized legal services for external inspections of overseas institutions for a Chinese concept stock company

  • Provided specialized legal services for data compliance governance to a well-known state-owned real estate group

  • Provided specialized legal services for data compliance and personal information protection for a major dairy company




RELATED PRACTICE AREAS
LAWYER SEARCH