Calista Chiu

I am an associate in our Commercial team based in Hong Kong. I advise clients on a wide range of commercial and regulatory matters with a particular focus on Technology, Media, Telecoms, Data Protection and Privacy laws and practices.

As a TMT and data protection lawyer, I advise clients which include leading local and multinational telecoms operators, technology companies, institutional investors and investment banks, on a variety of commercial and regulatory matters. These include preparing and negotiating commercial and business contracts in relation to sale and supply of goods and services, technology transfer and software licensing, and advising on regulatory and compliance issues from all aspects of commercial laws.

In light of the global increased use of online platforms for trading activities, I also regularly advise online platform operators on a wide range of legal issues, such as payment, anti-money laundering, consumer rights, privacy and cybersecurity issues.

I was seconded to the International Privacy and Data Protection Team of a leading PRC-headquartered internet and technology company for more than a year, and advised the company on various aspects of international data protection and privacy issues, with a particular focus on the cloud computing sector. Leveraging the experience gained in the in-house role, I am capable of supporting and providing practical advice to clients on all kinds of data protection and privacy matters, including formulating privacy notices, carrying out data privacy impact assessments, preparing and reviewing data protection related agreements and advising on data privacy risk and compliance.

I was admitted to practice as a Solicitor in Hong Kong in September 2020.

I am fluent in English, Cantonese and Mandarin.

• Acting for a US-headquartered multinational investment banking and financial services company on the review of a suite of commercial agreements for onboarding of vendors on its establishment of a joint venture.
• Advising a UK-headquartered multinational banking institution on all data protection matters covering its business operations in the APAC region, including without limitation privacy risk assessments, data protection and accountability obligations, cross-border data transfers, and employment-related data processing compliance obligations.
• Advising a statutory body of the Hong Kong government on data protection issues in relation to its proposed launch of internal administrative systems, including conducting privacy impact assessments and preparing privacy policies.
• Advising a Japan-headquartered beverage company on data compliance matters arising from data processing of data of its employees based in Hong Kong, Vietnam and Singapore, including updating of its global employee privacy policy.
• Acting for a PRC-headquartered technology solutions company in conducting transfer impact assessment in relation to cross-border transfer of data from the EEA to Hong Kong.