Xinyu Liu

Practice Areas

Cybersecurity & Data Protection, Investment/M&A & Corporate Governance, Litigation & Arbitration

Professional Memberships

The first batch member, the Expert Group for Data Compliance and Security Industry Development of Shanghai Municipal Commission of Economy and Informatization

Cybersecurity special lecturer, the Third Research Institute of Ministry of Public Security

Researcher, Internet Society of Shanghai

Council member, Shanghai Information Network Security Administration Association

Council member, Shanghai Finance Information Association

Member, New Data Center Committee of Shanghai Communication Society

Supervisor, Shanghai Pudong New Area Social Credit Promotion Center

Advisory expert on civil and administrative cases, the Supreme People’s Procuratorate

Researcher, Data Law Research Center of Shanghai Jiaotong University

Special external tutor, East China University of Political Science and Law

Researcher, the Practice Department of the Judicial Research Center of Fudan University

Practice teaching mentor, Xiamen University

Arbitrator, Weihai Arbitration Commission

Arbitrator, Zhanjiang Arbitration Commission

Arbitrator, Beihai Arbitration Commission

Arbitrator, Zibo Arbitration Commission

Publications

“Data Protection: Compliance Guidelines and Rule Explanations (2nd Edition)”, China Legal Publishing House, 2021

“Key Interpretation and Case Analysis of the Personal Information Protection Law of the People's Republic of China”, China Legal Publishing House, 2021

“Expert Interpretation and Explanation of Compliance for Online Lending Information Intermediary Business in Shanghai”, Shanghai University Press, 2018

“Artificial Intelligence: Intellectual Property Protection and Data Compliance” (co-editor), Zhong Lun Research Institute, 2021

“Zhong Lun New Energy Legal Anthology: Rules and Innovation in Variables” (co-editor), Zhong Lun Research Institute 2021

“Zhong Lun E-commerce Legal Anthology: Focus and Prospects in the New Industry” (co-editor), Zhong Lun Research Institute, 2021

“Witness and Outlook: 20 Years of Securities Litigation in China” (co-editor), Zhong Lun Research Institute, 2022

“Compliance Guide for Chinese Small and Micro Enterprises: Interpretation of the Application of 'Effectiveness Evaluation of SME Compliance Management System'”, Law Press, 2023

“Understanding and Application of 'Shanghai Data Regulation'”, China Legal Publishing House, 2023

“Analysis of Data Rights Ownership and its System Construction in the Era of Big Data”, Journal ofShanghai University (Social Science Edition), 2019

“Research on Construction of Data Rights and Big Data Transaction Rules” (Doctoral dissertation, ShanghaiJiaotong University)

“The Path Evolution of the Regulation of Small-Loan Companies in Shanghai”, Journal of Fintech LawReview, 2017.

“Clarifying Legal Liability and Bridging Various New Regulations - Interpretation of the Decision onAmending the Cybersecurity Law of the People's Republic of China (Exposure Draft)”, published on WoltersKluwer China Law & Reference website, September 2022

“The Establishment of Judicial Rules for Disputes Involving Face Recognition - Interpretation of the Full Textof the Judicial Interpretation of Face Recognition of the Supreme Court”, published on Wolters Kluwer ChinaLaw & Reference website, July 2021

“The Basic Establishment of Data Security Legislative Framework - Analysis of the Eight Key Points of theData Security Law”, published on Wolters Kluwer China Law & Reference website, June 2021

“The Strongest Regulation for Automotive Data - Analysis of Eleven Major Points of the Certain Provisions onAutomotive Data Security Management (Exposure Draft)”, published on Wolters Kluwer China Law &Reference website, May 2021

“First time | Seven Main Changes in the New Rules on the Protection of Children's Personal Informationand the Interpretation Article by Article”, published on Captain Financial Wechat Account, August 24, 2019.

“In-Depth Analysis of the Main Mode of Bank E-Commerce and Related Legal Issues”, published oncebnet.com, June 27, 2019.

“Interpretation of New Data Security Regulation Article by Article”, published on Captain Financial WechatAccount, May 29, 2019.

“Analysis of Clean-up and Exit Mechanisms for Online Lending Platforms”, Journal of Shanghai BarAssociation, October 2018.

“Concept and Practices: A study on Investor Suitability System”, published on Wolters Kluwer China Law &Reference website, July 19, 2017.

“Regulation and Punishment: A Commentary on China's Regulatory Path of the Domestic FintechIndustry”, December 16, 2016 (awarded the Second Prize in the 2016 Excellent Research Competition heldby Shanghai People's Procuratorate)

Personal

Mr. Jeffrey LIU, J.D, has extensive practice experience in the fields of cybersecurity, data protection, Investment/M&A & Corporate Governance etc.

Mr. Liu's team deeply understands the comprehensive impact of cybersecurity, data and privacy protection on modern business and is familiar with various emerging business scenarios and able to provide clients with "one-stop" legal services in the field from the perspective of business operations strategies.

Mr. Liu also has extensive experience in financial and commercial litigation and arbitration (including online arbitration) and has represented numerous domestic and international clients in litigation and arbitration. The scope of disputes involves financial products, corporate governance and equity, anti-unfair competition, investment related to private equity funds, and other commercial disputes. His skills and professionalism in handling complex cases are greatly appreciated by clients. He also provides consultation on administrative and criminal proceedings and deals with internal investigations for clients.

Expert in these Jurisdictions

PRC Bar, 2006

Qualified as an independent director of listed-companies in China, 2010

Experience

Partner, Zhonglun Law Firm

Partner, Beijing Dacheng Law Offices, Shanghai Office

Attorney, HaoLiWen PRC Attorneys

Languages Spoken

Chinese

English

Work Highlights

Cybersecurity, Data Protection, and Privacy

Acted as lead counsel to a large Chinese internet platform in data compliance, with services covering identifying and addressing problems in its current mechanism for receiving and handling data subject rights requests and privacy policy management, establishing an organization-wide new mechanism for the same, and providing consulting for the establishment of its privacy policy system for the entire group company

Acted as lead counsel to several fast-fashion retail giants in data compliance, with services covering establishment of data compliance systems, comprehensive reviews of personal information protection protocols, and cross-border data transfer compliance

Acted as lead counsel to several major consumer durables giants in data compliance, with services covering establishment of data compliance systems, comprehensive review and consultation on the content and distribution of all customer-facing documents throughout its business processes, personal information protection impact assessments, security assessments for cross-border data transfer, mobile applications compliance, etc.

Acted as lead counsel to a cross-border luxury goods e-commerce platform relating to personal information protection, and provided counsel on its cross-border data transfer, establishment of its e-commerce platform, and data compliance issues relating to its M&A project

Acted as lead counsel to several restaurant chains in data compliance, with services including streamlining data compliance systems, building compliance regimes, and advising on cross-border data transfer and personal information protection compliance

Acted as lead counsel to several automotive companies, assisting them in conducting personal information protection impact assessments regarding their actions including handling of sensitive personal information and entrusted processing of personal information, and advising them on compliance rectification

Acted as lead counsel to multiple companies across various industries, including consumer goods, healthcare, big data, artificial intelligence, etc., concerning their IPO data compliance, with services including drafting and reviewing relevant legal documents, screening data compliance risks, offering compliance rectification plans based on the findings, and providing support for listing review processes

Acted as lead counsel to several biotech companies in data compliance, with services covering filing of standard contracts for cross-border transfer of personal information during clinical trials and other compliance matters for clinical trial data

Acted as lead counsel to a clearing institution for data compliance issues in the process of applying for the opening of a bank card clearing institution by the joint venture established by the client and a well-known credit card organization, with services including assisting in analyzing data flows, reviewing compliance issues in data usage, sharing, and cross-border transfer, and issuing analysis opinions and risk mitigation solutions

Advised a multinational pharmaceutical company on a comprehensive data compliance assessment, with services including assessing the compliance of its practices of obtaining data from partners, assisting it to establish a partner management mechanism, and providing compliance advice on its data handling practices, including the handling of sensitive personal information

Assisted several large- and medium-size enterprises in handling data breach incidents, analyzing the nature of the incidents, formulating response plans, and assisting the clients in communicating with relevant authorities

Provided legal consulting on the data localization project to an international logistics giant

Assisted several domestic enterprises in conducting data transfer impact assessments under the GDPR in support of their overseas expansion

Acted as lead counsel to a well-known hotel chain, a cosmetic company, a game company, and a consumer company in handling compliance notifications and removals of their apps and in relevant rectification

Jeffrey’s bio can be found here: https://en.zhonglun.com/team/jeffreyliu.html