Johnny Liu

Johnny Liu is a Counsel in the Intellectual Property and Information Technology (IP&IT) practice at Shanghai Pacific Legal. He has substantial experience in data protection and cybersecurity regulation. He advises multinational corporations and technology companies on data privacy compliance, cross-border data transfers, cybersecurity incident response, digital transformation and technology collaborations. Combining transactional expertise with deep regulatory knowledge, he is well positioned to help clients navigate complex and evolving legal and regulatory requirements while delivering commercially practical and risk-based solutions.

Johnny also has extensive experience in corporate and technology law, with a focus on foreign direct investment, joint ventures, mergers and acquisitions, and other corporate transactions. He regularly advises clients in the technology, media and telecommunications (TMT) sector on a broad range of commercial and regulatory matters.

Prior to joining Shanghai Pacific Legal, Johnny practised at the Beijing office of a leading Chinese law firm and the Shanghai office of Norton Rose Fulbright. He also served as in-house counsel at a leading fintech company, where he was closely involved in the company’s day-to-day operations and strategic initiatives. Acting as one of the key legal contacts, he worked extensively with business, compliance, marketing and government affairs teams, gaining significant experience in cross-functional collaboration. In addition, he completed a secondment with a leading international energy company, where he was deeply involved in its digital transformation project and gained valuable experience at the intersection of technology and the energy sector.

Johnny was recognised by The Legal 500 Asia Pacific as a Rising Star in China Corporate and M&A in 2021. He is also a Certified Information Privacy Professional/Europe (CIPP/E), accredited by the International Association of Privacy Professionals (IAPP).

• Advised the China operations of a US-headquartered insurance company on regulatory compliance obligations and legal risks arising from a cybersecurity incident.
• Advised the China subsidiary of a US-headquartered medical device manufacturer on compliance with China’s cross-border data transfer regime.
• Assisted the China subsidiary of a German and US piano manufacturer with a comprehensive data privacy compliance programme.
• Assisted a China-headquartered life sciences research services company in responding to a cybersecurity incident.
• Assisted a US-headquartered medical device company in responding to a data breach incident.
• Assisted a Europe-headquartered industrial products manufacturer in responding to a data breach incident.
• Advised a Singapore-headquartered cryptocurrency company on its acquisition of a UK-based API company.
• Advised a Singapore-headquartered cryptocurrency company on a white-label cooperation arrangement with a licensed financial institution.
• Advised a US-headquartered technology company on the provision of AI-as-a-Service to customers in China.
• Advised a US-headquartered technology company on partnering with a licensed Chinese Internet Data Centre service provider to offer SaaS services in China.
• Assisted a US-headquartered media technology company in analysing China’s market entry requirements and establishing its China operations.
• Assisted a US-headquartered telecommunications company in reviewing its global services agreement.
• Assisted a global online real estate platform in establishing an exclusive strategic cooperation with JD.com.
• Assisted a Europe-headquartered risk management services provider in developing its AI compliance baseline and governance framework.
• Advised a Canadian location-based marketing company on market entry into China.
• Assisted a Guernsey-headquartered private equity investor in its acquisition of all issued shares of a Norwegian company whose Chinese subsidiaries engage in security and risk management services, as well as advanced dispersion, explosion and fire modelling businesses.
• Assisted a Thailand-headquartered listed energy company in its acquisition of newly issued shares in a Cayman Islands holding company whose group manufactures energy storage facilities in China.
• Assisted an African investment company in its acquisition of the China subsidiary of a multinational customer relationship management group.
• Assisted a Canadian designer and manufacturer of infant and childcare products in the disposal of its China business.

LL.M., Cornell Law School

LL.B., China University of Political Science and Law

• PRC

• Chinese
• English