GDPR sets strict guidelines for data collection, processing, and storage for any business operating in or serving customers in the EU. IT companies handle a vast amount of sensitive customer data, which makes GDPR compliance non-negotiable.

Our team supports fintech clients with:

• Data policy localization: We translate and localize privacy policies to ensure they meet GDPR standards while being understandable to local consumers.

• GDPR compliance support: We provide legal advisory services to help IT companies implement data protection measures, including consent forms, data processing agreements, and other legal documents.

• Acting as data protection representative: under EU law every non-EU processor of personal data (incl. from China) needs to designate a data protection representative in the Union. The representative should serve as a first point of contact for communication with EU data protection authorities and data subjects. 

• Acting as data protection officer: in addition to a data protection representative, some companies may be required to have a data protection officer(DPO). The DPO handles GDPR compliance activities within the company – e.g. monitoring ongoing compliance, training staff, conducting regular data protection impact assessments, handling complaints and requests from data subjects and helping in case of data breaches. 

We normally analyze the personal data flows managed by our clients and provide a GAP analysis – covering deficiencies in their GDPR compliance. On the basis of the GAP analysis, we prepare a blueprint of suggested actions to achieve compliance with the GDPR. 

We then provide full support with the implementation of further steps to reach GDPR compliance. Depending on the gaps identified, this could include:

• Redrafting and helping with the renegotiation of contracts with suppliers, so that they conform to the requirements of the GDPR;

• Introducing internal data protection and management policies consistent with the GDPR;

• Introducing procedures for timely reaction and notification of the authorities in case of data breaches. 

• Drafting relevant notifications and policies informing data subjects of their rights, as required by the GDPR.

Entering the European market often requires strategic partnerships, joint ventures, or integration with EU clients and service providers. Our legal team has extensive experience in:

• Structuring and negotiating B2B service agreements (MSAs covering SaaS, hosting,SLAs, and software licensing)

• Designing prime/subcontractor delivery models with clear risk and payment allocation

• Ensuring intellectual property ownership and exclusivity rights for software and platforms

• Supporting multi-phase service rollouts with defined milestones and payment triggers

• Coordinating with local legal counsel when required for multi-jurisdiction execution

We have led large-scale negotiations for global companies, including DXC Technology, and ensured full alignment between contract structures and business objectives.

Protecting your technology and brand assets is critical in the EU market. We help Chinese IT companies:

• Register trademarks and other IP across the EU

• Establish and protect software copyright ownership across the EU through clear contractual frameworks

• Draft and enforce IP clauses in licensing, development, and partner agreements

• Advise on protections against unauthorized use or redistribution of your software by customers or subcontractors

• Design clear internal IP ownership frameworks when working with EU-based developers or contributors