Skip to main content

China-related matters · Research first

For lawyers/Contact/Log in
China Legal PortalResearch · Routes · Counsel
Ask a lawyer

Search the portal

Practice area · China

Data Privacy & Cybersecurity Lawyers in China

PIPL, cross-border data transfer, cybersecurity, platform compliance, and incident response — free initial intake.

Browse lawyers ↓
5sub-specialties
Cityfiltering available
ENEnglish directory

Narrow by specialty

Subcategories

Personal Information and PIPL Cross-border Data Transfer Cybersecurity and Data Security Platform and App Compliance Incident Response

Overview

Practice orientation

Browse the data privacy and cybersecurity practice tree for personal information (PIPL), cross-border transfers, cybersecurity assessments, platform/app compliance, and incident response. This specialty directory is expanding; until more profiles are tagged here, use related IP, contracts, and dispute counsel below or request a shortlist.

Start with the PIPL business guide and cross-border data roadmap, or the privacy knowledge centre.

Submit an initial enquiry · Privacy insights.

Legal context

Process, issues, and further reading

Privacy & cyber orientation

  1. Map personal information processing under PIPL (purpose, necessity, consent vs other bases).
  2. Classify important data / CII where cybersecurity rules may apply.
  3. Design cross-border transfer mechanisms (standard contract, certification, or security assessment).
  4. Build incident response: detection, notification, and regulator engagement.
  5. Platform/app compliance: privacy policy, SDK audits, and minor-protection rules.

Key PRC sources (illustrative)

  • Personal Information Protection Law of the PRC (PIPL) (2021) — processing bases, individual rights, cross-border transfer.
  • Cybersecurity Law of the PRC (CSL) (2017) — network operators and CII protection.
  • Data Security Law of the PRC (DSL) (2021) — data classification and important data.
  • Measures for the Security Assessment of Outbound Data Transfers / standard contract rules — transfer mechanisms.

Centre: Data Privacy & Cybersecurity · PIPL guide.

Focused research

Quick answers for this practice

Start with a narrow national-law question, then use the directory to identify suitable counsel.

Consent Under PIPL

PIPL allows processing on consent and on other statutory bases (contract necessity, statutory duties, HR/labour rules, public health, reasonable news reporting, and other conditions provided by law).

Read quick answer

MLPS in China

Under CSL and the classified-protection regime, network operators grade systems (typically levels 1–5) by harm if the system is damaged.

Read quick answer

Consultation preparation

What to send before speaking with counsel

A focused first message helps a lawyer assess fit, urgency, conflicts, and likely next steps. Prepare:

  • a short summary of the issue and the outcome you want;
  • a dated timeline, including any filing, hearing, termination, or response deadline;
  • the key contract, notice, correspondence, registration, or decision documents;
  • the names and locations of the parties so the lawyer can check conflicts and jurisdiction; and
  • your preferred working language and whether you need an initial budget or fee estimate.

Do not send originals or unnecessary sensitive data before engagement terms and a secure document channel are confirmed.

Submit an initial enquiry.

Sources & trust

How this directory is maintained

Editorial owner: China Legal Portal Research Desk · Directory inventory reviewed: .

Profile status is shown per listing. Listing or verification is not an endorsement, recommendation, or guarantee of outcome. Profile fields come from sourced professional information, claimed updates, and directory maintenance — not from page render or cache time.

Listed
A directory profile maintained from available professional information.
Claimed
The lawyer or firm has taken control of the profile and supplied or confirmed information.
Verified
China Legal Portal has completed the checks described in the verification policy; always confirm current qualifications directly.

Verification policy · Editorial policy · Context and maintained sources

Directory

Lawyers

Directory profiles

FAQ

Common questions

Do I need PIPL counsel for a global SaaS product?
If you process personal information of individuals in China or otherwise fall within PIPL reach, map data flows and transfer mechanisms with qualified counsel.
What should a privacy intake include?
Where the servers and the China users are, whether data leaves China, and any regulator or customer notice already received. Cross-border transfer and an incident response are different scopes.
Where else to look while this list grows?
Many matters also use IP, contracts, or dispute counsel with privacy experience.

Explore more

Related practice areas

Technology & AI →Intellectual Property →Financial Services & FinTech →Life Sciences & Healthcare →All practice areas →

Can't find the right lawyer?

Describe your matter or browse by city for more options.

Ask a LawyerBrowse by city