EU Privacy & Data Protection Consulting

Helping Chinese companies enter and grow in the EU/EEA with confidence through practical, business-focused data protection solutions.

We work directly with businesses or alongside their legal advisors to turn complex EU data protection requirements into practical and actionable compliance solutions.

Meet our expert now

Privacy data-flow assessment across applications, systems and international processing locations

EU Market Entry Privacy Assessment

As a first step for companies planning to enter the EU/EEA market, we help you understand applicable data protection obligations, evaluate your current compliance status, and identify potential privacy risks before they become business or regulatory issues.

Initial assessment – an essential first step for companies entering the EU/EEA market:

GDPR Applicability Assessment
EU Privacy Compliance Risk Pre-screening
Initial Controller / Processor Role Assessment

Further assessment and compliance planning:

EU Market Entry Privacy Checklist
EU Privacy Compliance Gap Assessment
Data Processing & Data Flow Mapping
GDPR Compliance Roadmap

GDPR Compliance Framework & Documentation

We can prepare the following data protection documentation independently or in collaboration with your legal team:

Privacy Notice / Privacy Policy
Records of Processing Activities (RoPA)
Data Processing Agreements (DPA)
Legitimate Interest Assessment (LIA)
Consent & Cookie Compliance
Data Retention Policy
Data Subject Rights Procedures
Data Breach Response Procedure
Internal Privacy Policies & Procedures
Vendor / Processor Privacy Assessment

DPIA & Privacy Risk Assessment

We can deliver the following privacy assessments independently or in collaboration with your legal team:

Data Protection Impact Assessment (DPIA)
Privacy Impact Assessment (PIA)
Product / Feature Privacy Review

EU-China Data Transfer Compliance

Cross-border data transfers are one of the most complex compliance challenges for Chinese companies entering the EU/EEA market. Significant regulatory fines and enforcement actions have been imposed for non-compliant transfers of personal data outside the EU/EEA. We provide practical support in assessing international data flows, designing technical architecture and safeguards, establishing appropriate transfer mechanisms, and implementing the necessary organizational measures. Our services include:

China–EU Personal Data Transfer Assessment
Standard Contractual Clauses (SCC)
Transfer Impact Assessment (TIA)
Remote Access from China Assessment
International Data Transfer Mapping
Supplementary Measures Assessment
Cross-border Vendor / Cloud Assessment
China PIPL–EU GDPR Coordination

EU Representation & DPO Support

We separately provide the following EU privacy representation under GDPR Article 27 or External DPO services at competitive rates. Our External DPO Service includes:

DPO Advisory & Support
Data Subject Contact Support
Supervisory Authority Communication Support
GDPR Compliance Monitoring
Privacy Training & Awareness

Ongoing Privacy Compliance & Incident Support

We provide ongoing support for your day-to-day privacy operations, including:

Ongoing GDPR Advisory
Privacy by Design & Default
Privacy Compliance Monitoring
New Product / Feature Privacy Review
Data Breach Assessment & Response
Data Subject Request (DSR) Support
Regulatory Inquiry Support
Privacy Training
Periodic Compliance Review

Privacy Certification Support

To help build trust with EU consumers and business partners, we prepare your organization, products, and data processing activities for recognized European and international privacy certification frameworks.

01GDPR Certification Readiness Assessment
02Certification Scheme & Certification Body Selection Support
03GDPR Certification Gap Analysis
04Certification Scope Definition
05Evidence & Documentation Preparation
06Pre-assessment / Pre-audit Support
07Remediation Planning & Implementation Support
08Certification Audit Support
09Surveillance / Re-certification Support

We have strong experience in supporting the following privacy certification frameworks:

Europrivacy / GDPR Certification
ISO/IEC 27701 Privacy Information Management
ISO/IEC 27001 / 27018 Privacy-related Alignment

Meet our privacy expert

Jason is our privacy and technology expert, with over a decade of international experience in data protection and privacy compliance and more than 20 years in information technology (IT). He holds the IAPP CIPP/E and CIPT credentials and has been awarded the Fellow of Information Privacy (FIP) designation.

Having worked at IBM, Nokia, Huawei and ByteDance, Jason combines a strong technical background with extensive experience in software development, systems integration, mobile applications and digital services, data processing, privacy and data protection.

With his cross-functional expertise in privacy compliance and technology, he translates complex EU privacy and data protection requirements into clear, actionable measures for business, product and technology teams.

View Jason’s profile

Cooperation with partners

We support law firms and professional partners in delivering EU privacy compliance services to their clients through flexible cooperation models, including subcontracting, joint delivery, and white-label support, while allowing our partners to retain the primary client relationship.