Expertise

Data Protection &
Cybersecurity

Data Protection
& Cybersecurity

Governments around the world are adopting ever stricter data protection regulations and enforcing them vigorously. Every business that collects or processes personal data, whether they relate to customer or employee information, must comply with applicable data protection and privacy laws.

At OrionW, we advise local and multinational businesses on the full range of Singapore and cross-border data protection and privacy compliance matters. We address data protection issues in a clear and pragmatic manner and have extensive experience structuring strategic and effective data protection compliance programs.

We also advise on cybersecurity issues that affect many businesses. From omnibus cybersecurity legislation to the protection obligation of data protection laws to the technology risk management guidelines of financial services regulations, OrionW combines technology awareness with legal acumen and business savvy to deliver clear and actionable guidance on the legal implications of cybersecurity for businesses in all industry sectors.

Our experienced team can assist with a wide range of Data Protection and Cybersecurity matters including:

  • Advising on privacy policies and terms and conditions
  • Conducting data protection compliance audits
  • Preventing and managing data breach incidents
  • Devising data protection compliance strategies

Credentials

Representative Matters

Data protection compliance projects

Advised numerous clients on data protection compliance projects in Asia.

Data breach notification

Advised various companies on data breach notification requirements in the APAC region.

Privacy and cookies policies

Advised a financial institution on privacy and cookies policies.

Outsourcing agreement

Acted for licensed digital banks on data protection and cybersecurity issues relating to outsourcing agreements in Singapore.

Data sharing framework

Completed a national data anonymisation and risk assessment project as part of the Smart Nation initiative.

Cross-border data transfer project

Advised a global telecommunications company on data transfer, data retention and data localisation issues.

Testimonials

OrionW is “very knowledgeable about the technology sector, very responsive and very commercial.”

Asialaw Profiles 2023 edition

Testimonials

OrionW provides “an excellent service, is very knowledgeable in the technology sector and provides excellent value for money.”

The Legal 500 Asia Pacific 2019 edition

Testimonials

"Winnie Chang leads the team and provides outstanding support, based on many years of experience."

The Legal 500 Asia Pacific 2024 edition

Testimonials

OrionW is “a high quality TMT firm with reliable and consistent output.”

The Legal 500 Asia Pacific 2022 edition

Testimonials

"The team has extensive experience in TMT, and is always responsive and standby the clients’ needs. OrionW has unique quality to fully understand the client’s needs and tailor their advice to the client’s situation."

The Legal 500 Asia Pacific 2024 edition

Testimonials

OrionW has “deep sectoral knowledge of telecommunications and technology and associated regulation; diligent, timely and cost-effective work.”

Asialaw Profiles 2021 edition

Testimonials

Winnie Chang is “approachable, deeply knowledgeable and responsive.”

Asialaw Profiles 2024 edition

Testimonials

OrionW is a “great boutique law firm specialising in technology. The firm is strong on complex commercial technology arrangements. The soft skills of the firm are impressive including clear and responsive communication with clients.”

The Legal 500 Asia Pacific 2020 edition

Testimonials

“OrionW is very strong on technology law, including regulatory, commercial and M&A matters, and my ‘go to’ firm in Singapore.”

The Legal 500 Asia Pacific 2020 edition

Testimonials

OrionW gives “clear, practical advice that is delivered promptly..."

Asialaw Profiles 2024 edition

Testimonials

“We enjoyed working with OrionW. Communication, understanding of the deal, knowledge and application of the law as well as good budget management were all strengths. There were no weaknesses during the transaction.”

Asialaw Profiles 2020 edition

Testimonials

"Winnie Chang is super responsive and practical in giving advice."

The Legal 500 Asia Pacific 2024 edition

Testimonials

OrionW has the “ability to understand our business and our needs, combined with high work capacity and the ability to get things done in time with the right quality.”

Asialaw Profiles 2020 edition

Testimonials

OrionW is “pragmatic, responsive, set expectations correctly.”

Asialaw Profiles 2020 edition

Testimonials

OrionW is “knowledgeable about the regulatory issues. Assisted with regulator communications.”

Asialaw Profiles 2019 edition

Testimonials

“Winnie Chang is an extremely experienced and able technology lawyer, with a very practical commercial approach.

Asialaw Profiles 2023 edition

Testimonials

“Winnie Chang has a robust practice in the TMT space and frequently advises on matters relating to fintech, including blockchain and payment services issues. She is well placed to handle cross-border mandates.”

Chambers & Partners Asia Pacific 2021 edition

Testimonials

“Winnie Chang is very knowledgeable and responsive.”

Chambers & Partners Asia Pacific 2024 edition

Insights

Stay Informed

August 2023 decisions of the Personal Data Protection Commission highlight the importance of Do Not Call Registry checks before sending marketing messages and robust security measures and timely remedial processes to protect personal data.

Overview of PDPC’s August 2023 Decisions

Date
Aug 18, 2023
Author
OrionW
Read more
The PDPC’s Proposed Advisory Guidelines on Use of Personal Data in AI Recommendation and Decision Systems provides organisations with guidance on baseline policies and best practices for protecting personal data when using AI systems.

Proposed PDPC Advisory Guidelines on Personal Data Use in AI Systems

Date
Jul 21, 2023
Author
OrionW
Read more
The Cyber Security Agency of Singapore launched a licensing framework on 11 April 2022 requiring providers of penetration testing services or managed security operations centre monitoring services to be licensed.

Mandatory Licensing for Certain Cybersecurity Service Providers in Singapore

Date
Jul 6, 2023
Author
OrionW
Read more
View all insights