Expertise

Data Protection &
Cybersecurity

Data Protection
& Cybersecurity

Governments around the world are adopting ever stricter data protection regulations and enforcing them vigorously. Every business that collects or processes personal data, whether they relate to customer or employee information, must comply with applicable data protection and privacy laws.

At OrionW, we advise local and multinational businesses on the full range of Singapore and cross-border data protection and privacy compliance matters. We address data protection issues in a clear and pragmatic manner and have extensive experience structuring strategic and effective data protection compliance programs.

We also advise on cybersecurity issues that affect many businesses. From omnibus cybersecurity legislation to the protection obligation of data protection laws to the technology risk management guidelines of financial services regulations, OrionW combines technology awareness with legal acumen and business savvy to deliver clear and actionable guidance on the legal implications of cybersecurity for businesses in all industry sectors.

Our experienced team can assist with a wide range of Data Protection and Cybersecurity matters including:

  • Advising on privacy policies and terms and conditions
  • Conducting data protection compliance audits
  • Preventing and managing data breach incidents
  • Devising data protection compliance strategies

Credentials

Representative Matters

Data protection compliance projects

Advised numerous clients on data protection compliance projects in Asia.

Data breach notification

Advised various companies on data breach notification requirements in the APAC region.

Privacy and cookies policies

Advised a financial institution on privacy and cookies policies.

Outsourcing agreement

Acted for licensed digital banks on data protection and cybersecurity issues relating to outsourcing agreements in Singapore.

Data sharing framework

Completed a national data anonymisation and risk assessment project as part of the Smart Nation initiative.

Cross-border data transfer project

Advised a global telecommunications company on data transfer, data retention and data localisation issues.

Testimonials

OrionW is “very knowledgeable about the technology sector, very responsive and very commercial.”

Asialaw Profiles 2023 edition

Testimonials

OrionW provides “an excellent service, is very knowledgeable in the technology sector and provides excellent value for money.”

The Legal 500 Asia Pacific 2019 edition

Testimonials

"Winnie Chang leads the team and provides outstanding support, based on many years of experience."

The Legal 500 Asia Pacific 2024 edition

Testimonials

OrionW is “a high quality TMT firm with reliable and consistent output.”

The Legal 500 Asia Pacific 2022 edition

Testimonials

"The team has extensive experience in TMT, and is always responsive and standby the clients’ needs. OrionW has unique quality to fully understand the client’s needs and tailor their advice to the client’s situation."

The Legal 500 Asia Pacific 2024 edition

Testimonials

OrionW has “deep sectoral knowledge of telecommunications and technology and associated regulation; diligent, timely and cost-effective work.”

Asialaw Profiles 2021 edition

Testimonials

Winnie Chang is “approachable, deeply knowledgeable and responsive.”

Asialaw Profiles 2024 edition

Testimonials

OrionW is a “great boutique law firm specialising in technology. The firm is strong on complex commercial technology arrangements. The soft skills of the firm are impressive including clear and responsive communication with clients.”

The Legal 500 Asia Pacific 2020 edition

Testimonials

“OrionW is very strong on technology law, including regulatory, commercial and M&A matters, and my ‘go to’ firm in Singapore.”

The Legal 500 Asia Pacific 2020 edition

Testimonials

OrionW gives “clear, practical advice that is delivered promptly..."

Asialaw Profiles 2024 edition

Testimonials

“We enjoyed working with OrionW. Communication, understanding of the deal, knowledge and application of the law as well as good budget management were all strengths. There were no weaknesses during the transaction.”

Asialaw Profiles 2020 edition

Testimonials

"Winnie Chang is super responsive and practical in giving advice."

The Legal 500 Asia Pacific 2024 edition

Testimonials

OrionW has the “ability to understand our business and our needs, combined with high work capacity and the ability to get things done in time with the right quality.”

Asialaw Profiles 2020 edition

Testimonials

OrionW is “pragmatic, responsive, set expectations correctly.”

Asialaw Profiles 2020 edition

Testimonials

OrionW is “knowledgeable about the regulatory issues. Assisted with regulator communications.”

Asialaw Profiles 2019 edition

Testimonials

“Winnie Chang is an extremely experienced and able technology lawyer, with a very practical commercial approach.

Asialaw Profiles 2023 edition

Testimonials

“Winnie Chang has a robust practice in the TMT space and frequently advises on matters relating to fintech, including blockchain and payment services issues. She is well placed to handle cross-border mandates.”

Chambers & Partners Asia Pacific 2021 edition

Testimonials

“Winnie Chang is very knowledgeable and responsive.”

Chambers & Partners Asia Pacific 2024 edition

Insights

Stay Informed

In its first decision on the matter, the Personal Data Protection Commission explains when and how organisations may validly rely on the Legitimate Interests Exception to collect personal data without consent.

PDPC Decision: Reliance on Legitimate Interests Exception to Consent Requirement

Date
Jan 25, 2023
Author
OrionW
Read more
Amendments to the Australian Privacy Act 1988 (APA) expanded its extraterritorial provisions with effect from 13 December 2022, thereby requiring foreign organisations carrying on business in Australia to comply with the APA.

Amendments to Australian Privacy Act Expands Extraterritoriality

Date
Dec 19, 2022
Author
OrionW
Read more
In a landmark decision, the Singapore Court of Appeal clarified whether emotional distress and loss of control of personal data constitute actionable losses that would support a private action under section 32 (now section 48O) of the PDPA.

Landmark Case on Loss as Grounds for PDPA Private Action

Date
Sep 15, 2022
Author
OrionW
Read more
View all insights