Crisis management: Handling China data breaches and security incidents

7 Nov 2023 15:30 - 17:00

Legal, operational, and practical tips on preparing for and responding to data breaches and security incidents.

Due to force majeure, this event has been cancelled. For any ticketing inquiries, please email yiwen.ling@britishchambershanghai.cn

Cyber-attacks and data breaches have exponentially increased in recent years with recent geopolitical tensions and the rise in ransomware incidents. Businesses need to understand the legal and business risks of these incidents and be ready to respond quickly just like any other crisis.

The British Chamber of Commerce, Shanghai’s Legal and Compliance Committee will host a hybrid sharing by legal and risk assurance experts from Clyde & Co and PwC, respectively, to discuss key issues including:

Common types of recent data breaches and their impacts
Potential workstreams that a company needs to manage and tackle during a data breach including containing and remediating the data breach, conducting a forensic investigation, and complying with notification requirements with regulators, individuals, and third parties.
Data breach response team and third-party service providers – who they should be and what their respective roles are.
Key strategic processes, tools, and deliverables that should commence following discovery of a data breach.

Patrick Wong

Partner, PwC

Patrick is a Partner in PwC’s Cybersecurity and Privacy practice with over a decade of experience in leading regional cyber security teams specializing in cyber security risk management, strategy, architecture and incident response. He is the co-founder of PwC’s Security Operation Centre in Mainland China and has led a number of incident response and red team engagements to help clients respond and contain incidents, identify weaknesses and provide recommendations to improve their cyber security posture. In addition, he has led multiple global managed security services, incident response and network security transformation projects for clients globally.

He has been engaged by clients in incident response cases related to ransomware, data breaches and insider theft. More recently, he has also been helping clients in a number of Personal Information Protection Law (PIPL), Cross Border Data Transfer (CBDT) and localization programs in order to help clients meet regulatory and legal requirements based on the recent development in cyber security and data protection laws.

Patrick is recognized as a Fellow of Information Privacy by IAPP and holds multiple industry certifications including Certified Information Privacy Professional/Asia (CIPP/A), Certified Information Privacy Professional/Europe (CIPP/E), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologists (CIPT), Certified Information Systems Security Professional (CISSP), Information Systems Security Management Professional (ISSMP), Information Systems Architecture Professional (ISSAP), Cloud Security Professional (CCSP), Secure Software Lifecycle Professional (CSSLP), Certified Information Security Manager (CISM), Information Systems Auditor (CISA) and Risk and Information Systems Control (CRISC).

Patrick holds a Juris Doctor from the Chinese University of Hong Kong, a Masters of Law from University of Southern California and a Master of Business Administration from University of California, Davis. In addition, Patrick holds multiple patents in the area of malware detection, network security and is often invited to speak at major events and vendor summits across the region. Patrick publishes articles regularly and had been quoted and featured in the media where he shares insights and trends from data breaches to help drive awareness as well as approaches to manage cyber threats.

Zhen Guang Lam

Senior Associate, Clyde & Co.

Zhen Guang regularly advises clients in multiple sectors on transactional projects such as technology outsourcing and procurement, as well as advisory matters focusing on data privacy and protection, cybersecurity, Fintech (regulatory), and technology risk management. He also has extensive experience handling complex and sensitive investigations involving cybersecurity attacks and data breach incidents.

Zhen Guang is also:

a legal advisor under the Payment Regulatory Evaluation Program (PREP), an initiative by the Monetary Authority of Singapore to assist payment services providers;
an Accredited Specialist (Data and Digital Economy) appointed by the Singapore Academy of Law as part of the pioneer batch of accredited specialists (Data and Digital Economy); and
a Committee Member of the Cybersecurity & Data Protection Committee of the Law Society of Singapore for 2023.

He holds the Certified Information Privacy Professional/Asia (CIPP/A) and the Certified Information Privacy Professional/Europe (CIPP/E) data protection/privacy accreditation from the International Association of Privacy Professionals (IAPP).

In addition, Zhen Guang has been on secondment to Ant Group in Hangzhou, China, where he advised on various commercial projects including collaboration arrangements and Blockchain-as-a-Service agreements.

Zhen Guang is fluent in English and Mandarin.

Katharine Yin

Senior Associate, Clyde & Co Westlink JLV

Katharine Yin is a PRC qualified lawyer who specialises in China corporate legal matters with a focus on FDI, M&A, corporate governance and compliance (including insurance company), data & privacy protection and employment matters.

Katharine acts for various clients including multinationals, private Chinese companies as well as large Chinese state-owned enterprises in various practice areas including distribution and supply chain structures; customs; trade and transportation. She advises clients on joint ventures, corporate financing and mergers and acquisitions including corporate reorganisations and merger controls.

Katharine has advised various multinational corporations on data compliance matters, including data incident response mechanism, amendment and update of privacy policies, and application of laws & regulations with regards to data (including personal information) protection in business operations, such as issues pertaining to obtaining individual consent, cross-border transmission, entrusted processing, personal information protection impact assessment, contract terms with the recipient, etc.

Alex Roberts

Counsel, China Head of TMT, Linklaters

Alex Roberts has been working in Shanghai with British-headquartered law firm, Linklaters LLP, since 2012 and previously studied and worked in Beijing (first in 2005). Alex has been involved with the Chamber almost since arriving in Shanghai and am proud to have seen its development over this time with a dedicated group of staff and members. Alex is passionate about continuing to drive British and international business opportunities in China through his legal expertise and network, helping to organise framework for knowledge-sharing events and improving the dialogue between the UK and China for the good of all stakeholders.

3:30pm – 4:00pm: Registration and Networking
4:00pm – 4:05pm: Opening introduction by Legal & Compliance ExCo Representative
4:05pm – 4:20pm: Keynote on approaching incidents through a legal lens by Clyde & Co
4:20pm – 4:35pm: Keynote on cyber risk management by PwC
4:35pm – 4:50pm: Panel discussion
4:50pm – 5:00pm: Q&A

*The Chamber reserves the right to alter the above agenda at its sole discretion.

Notes:

For event attendees, if you have any prepared questions, thoughts, or insights that you would like to discuss during the event, kindly send an email to the BritCham Shanghai Event staff yiwen.ling@britishchambershanghai.cn before 12 pm, 3 November, 2023 to facilitate productive discussions.
For online attendees, the webinar will be conducted via ZOOM. You will receive an email with a ZOOM meeting ID and password around 5 pm, 6 November. Please ensure your email address is valid, and please make sure to check your junk box as well.
In case of cancellation, please kindly note you must email the BritCham Shanghai Event staff yiwen.ling@britishchambershanghai.cn before 12 pm, 6 November 2023. Due to the service charges of Glueup and online payment platforms, we can only partially refund up to 90% of your ticket price and payment will be processed within 14 days after the event via your original payment method. However, it is non-refundable for a cancellation request made beyond the above-mentioned timeframe.

Declaration:

BritCham Shanghai might take photos from the event and post these on its communication channels (for example website, newsletter and social media platforms) in order to create awareness of these events. By attending this event you consent to British Chamber of Commerce Shanghai taking and using such photos as described above.

To take any professional photography or video of the event, please inform the secretariat in advance, including:

Proposed content at least 3 working days before planned release date;
Proposed dates for post event release through the BritCham media channels;
Ensure all speakers have written confirmation.

Refer to Appendix IV Video and image Capturing and Media Usage Guideline

PwC Office

2 Corporate Avenue, 202 Hu Bin Road, Huangpu District, Shanghai

中国上海市黄浦区湖滨路202号领展企业广场二座普华永道

BritCham Shanghai is an organisation proudly run by its members — for its members. Whether your business is based in China or overseas, we welcome you to be part of our community. Let's connect, and become a member today.