元朴律师事务所

Areas of Practice

Ms. Xu has extensive legal service experience in the field of data compliance. She can provide comprehensive support covering cybersecurity review, data‑compliance work for IPOs, cross‑border data transfers, artificial intelligence, product “go‑global” projects, government investigations, and the establishment of enterprise‑wide data‑compliance systems. She excels at handling multi‑jurisdictional data‑compliance issues and assessing compliance risks for innovative business models and other complex matters.

Her clients include numerous Fortune 500 multinationals, listed companies, and state‑owned enterprises across healthcare & life sciences, TMT, artificial intelligence, retail, consumer goods, and the hotel industry. Representative clients include Bayer, Johnson & Johnson, Roche, Servier, Fresenius Kabi, Boston Scientific, Tencent Music, Baidu, Vipshop, and BCG.

Ms. Xu is also focused on antitrust work: she has successfully represented multiple companies in securing merger‑control clearances, helped clients respond to antitrust investigations, and built and refined their antitrust‑compliance systems and processes.

Working language

Mandarin Chinese, English and Korean

Qualification

China

Education

Seoul National University，Master of Laws

China University of Political Science and Law，Bachelor of Laws

Representative Matters（Selected）

Advising a global medical device company on ongoing data compliance matters, including routine legal advice, product compliance design and review, AI compliance assessments, legal documentation, and regulatory analysis and interpretation.

Advising a well-known internet company on ongoing data compliance matters, including routine legal advice, financial marketing compliance, cross-border data transfer assessments, regulatory incident response, M&A transactions, and regulatory analysis and interpretation.

Advising a global management consulting firm on ongoing data compliance matters, including routine legal advice, legal documentation, regulatory incident response, compliance training programs, and regulatory analysis and interpretation.

Advising a consumer goods and trendy retail company on multi-jurisdictional data compliance projects, including identification and analysis of applicable laws and regulations, compliance assessments, remediation measures, and preparation of compliance reports, covering multiple jurisdictions such as Vietnam, Indonesia, the United Arab Emirates, Canada, the European Union, Singapore, Thailand, and the United States.

Advising HighTide Therapeutics, Inc. (02511.HK) on data compliance matters in connection with its Hong Kong listing.

Advising an electric vehicle charging service provider on data compliance matters in connection with its U.S. IPO.

Advising an internet-based healthcare platform on a cybersecurity review, which has been approved by the Cyberspace Administration of China (CAC).

Advising an AI company in the emotional companionship sector on algorithm filing requirements (generative and synthetic algorithms).

Advising a well-known multinational pharmaceutical company on a data export security assessment, supporting the approval of the first case involving the core business of a foreign-invested pharmaceutical company in Beijing.

Advising a Chinese pharmaceutical company on multiple standard contract filings for cross-border data transfers in connection with its multinational business development (BD) transactions, successfully obtaining filing numbers from the CAC.