Roundtable on Crisis Management: Handling China data breaches and security incidents [by invitation only]

Patrick is a Partner in PwC’s Cybersecurity and Privacy practice with over a decade of experience in leading regional cyber security teams specializing in cyber security risk management, strategy, architecture and incident response. He is the co-founder of PwC’s Security Operation Centre in Mainland China and has led a number of incident response and red team engagements to help clients respond and contain incidents, identify weaknesses and provide recommendations to improve their cyber security posture. In addition, he has led multiple global managed security services, incident response and network security transformation projects for clients globally.

He has been engaged by clients in incident response cases related to ransomware, data breaches and insider theft. More recently, he has also been helping clients in a number of Personal Information Protection Law (PIPL), Cross Border Data Transfer (CBDT) and localization programs in order to help clients meet regulatory and legal requirements based on the recent development in cyber security and data protection laws.

Patrick is recognized as a Fellow of Information Privacy by IAPP and holds multiple industry certifications including Certified Information Privacy Professional/Asia (CIPP/A), Certified Information Privacy Professional/Europe (CIPP/E), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologists (CIPT), Certified Information Systems Security Professional (CISSP), Information Systems Security Management Professional (ISSMP), Information Systems Architecture Professional (ISSAP), Cloud Security Professional (CCSP), Secure Software Lifecycle Professional (CSSLP), Certified Information Security Manager (CISM), Information Systems Auditor (CISA) and Risk and Information Systems Control (CRISC).

Patrick holds a Juris Doctor from the Chinese University of Hong Kong, a Masters of Law from University of Southern California and a Master of Business Administration from University of California, Davis. In addition, Patrick holds multiple patents in the area of malware detection, network security and is often invited to speak at major events and vendor summits across the region. Patrick publishes articles regularly and had been quoted and featured in the media where he shares insights and trends from data breaches to help drive awareness as well as approaches to manage cyber threats.

Zhen Guang regularly advises clients in multiple sectors on transactional projects such as technology outsourcing and procurement, as well as advisory matters focusing on data privacy and protection, cybersecurity, Fintech (regulatory), and technology risk management. He also has extensive experience handling complex and sensitive investigations involving cybersecurity attacks and data breach incidents.

Zhen Guang is also:

• a legal advisor under the Payment Regulatory Evaluation Program (PREP), an initiative by the Monetary Authority of Singapore to assist payment services providers;
• an Accredited Specialist (Data and Digital Economy) appointed by the Singapore Academy of Law as part of the pioneer batch of accredited specialists (Data and Digital Economy); and
• a Committee Member of the Cybersecurity & Data Protection Committee of the Law Society of Singapore for 2023.

He holds the Certified Information Privacy Professional/Asia (CIPP/A) and the Certified Information Privacy Professional/Europe (CIPP/E) data protection/privacy accreditation from the International Association of Privacy Professionals (IAPP).

In addition, Zhen Guang has been on secondment to Ant Group in Hangzhou, China, where he advised on various commercial projects including collaboration arrangements and Blockchain-as-a-Service agreements.

Zhen Guang is fluent in English and Mandarin.

Katharine Yin is a PRC qualified lawyer who specialises in China corporate legal matters with a focus on FDI, M&A, corporate governance and compliance (including insurance company), data & privacy protection and employment matters.

Katharine acts for various clients including multinationals, private Chinese companies as well as large Chinese state-owned enterprises in various practice areas including distribution and supply chain structures; customs; trade and transportation. She advises clients on joint ventures, corporate financing and mergers and acquisitions including corporate reorganisations and merger controls.

Katharine has advised various multinational corporations on data compliance matters, including data incident response mechanism, amendment and update of privacy policies, and application of laws & regulations with regards to data (including personal information) protection in business operations, such as issues pertaining to obtaining individual consent, cross-border transmission, entrusted processing, personal information protection impact assessment, contract terms with the recipient, etc.

Alex Roberts has been working in Shanghai with British-headquartered law firm, Linklaters LLP, since 2012 and previously studied and worked in Beijing (first in 2005). Alex has been involved with the Chamber almost since arriving in Shanghai and am proud to have seen its development over this time with a dedicated group of staff and members. Alex is passionate about continuing to drive British and international business opportunities in China through his legal expertise and network, helping to organise framework for knowledge-sharing events and improving the dialogue between the UK and China for the good of all stakeholders.