Data Compliance
& Cybersecurity

Drew Network Asia’s (DNA) Data Compliance & Cybersecurity Practice includes firms at the forefront of the development of these fields in their respective countries. Many countries around the world, including several within ASEAN, have enacted data protection and cybersecurity laws to better protect individuals’ personal data and national information systems infrastructure. Our lawyers have advised on all aspects of such laws, including regulatory/enforcement, commercial and international/cross-border aspects.

We aim to be the leading legal practice in this field in the region. DNA’s constituent firms have lawyers with numerous years of experience in these and related fields as well as, in some cases, dedicated Data Protection & Cybersecurity practices.

Our firms’ work in these fields precedes the advent of national laws such as Malaysia’s Personal Data Protection Act 2010, Indonesia’s Electronic Information and Transactions Law, Singapore’s Personal Data Protection Act 2012 and Cybersecurity Act 2018, Thailand’s Personal Data Protection Act 2019, and Vietnam’s Personal Data Protection Decree 2023 as well as various other national laws relating to telecommunications, media, information technology and cybercrime which may also establish general or sectoral requirements relating to data protection and/or cybersecurity.

We act for a wide variety of clients in relation to data protection and cybersecurity compliance. These include many prominent and well-known multinational / foreign corporations, Internet companies, local companies across different industries and, in some cases, national data protection authorities. Our experience includes advising on or providing the following, amongst others:

  • Implementation of company / group-wide compliance programmes;
  • Localisation of global/regional data protection policies;
  • Establishment of the internal data protection function and required internal processes;
  • Contracts for data processing and cross-border data transfers, as well as data protection provisions for a variety of contracts;
  • Employment-related aspects of data protection including protection of foreign employees’ personal data;
  • Sectoral data protection and cybersecurity requirements;
  • Data breach management and notification;
  • Compliance and regulatory risk audits and impact assessments;
  • Data protection and cybersecurity compliance training;
  • Enforcement–related issues, regulatory appeals and offences relating to data protection, cybersecurity and related areas; and
  • Disputes and civil proceedings relating to data protection and/or cybersecurity issues.

Key Partners

Lim Chong Kin

Managing Director, Corporate & Finance / Head, Telecommunications, Media and Technology (TMT) / Co-Head, Data Protection, Privacy & Cybersecurity / Co-Head, Competition Law & Regulatory /
Read more

David N. Alfred

Director, Corporate & Finance / Co-Head, Data Protection, Privacy & Cybersecurity / Co-Head and Programme Director, Drew Data Protection & Cybersecurity Academy
Read more

Reagan Roy Teguh

Partner / Franchising & Licensing / Media, IT and Telecommunications / Intellectual Property / Foreign Direct Investment / Mergers & Acquisitions / Hotel, Resort & Tourism / Employment
Read more

Heru Mardijarto

Partner / Construction / Foreign Investment & General Corporate Practice / Infrastructure and Major Project / Media, IT and Telecommunications / Mergers and Acquisitions /
Read more

Janet Toh Yoong San

Partner / Head, Personal Data Protection & Privacy Laws / Intellectual Property / Technology, Media & Telco
Read more

Timothy Siaw

Partner / Head, Technology, Media & Telco / Intellectual Property / Healthcare and Life Sciences
Read more

Erika B. Paulino

Partner, Corporate and Commercial Group / Head, Data Compliance & Cyber Security / Co-Head, Projects & Energy / Co-Head, Restructuring & Insolvency
Read more

Kristine R. Bongcaron

Partner / Head, Intellectual Property / Co-Head, Commercial Arbitration and Alternative Dispute Resolution / Co-Head, Data Privacy and Security
Read more

Athistha (Nop) Chitranukroh

Partner and Director, Corporate & Commercial
Read more

Nopparat Lalitkomon

Partner, Corporate & Commercial
Read more

Accolades

Singapore | Drew & Napier

Asian Legal Business Southeast Asia Law Awards
Lim Chong Kin – Southeast Asia Data Privacy and Protection Lawyer of the Year 2024

GDR 100
Listed as one of the world’s top 100 data law firms by Global Data Review for 4 consecutive years

Lim Chong Kin - Leading Individual

 

  • The practice “accurately identifies our needs without much prompting” and is able to “tailor a comprehensive scope of services which met our objectives, timeline and budget”. The client also praises the team’s extensive network, which is “able to connect us with reputable law firms in other countries to assist us on the personal data protection project, so while we communicated with Drew & Napier only, the team smoothly coordinated the project with foreign law firms”.
  • “Whether you have a fat or lean legal budget, Chong Kin remains consistent as a true partner and far-sighted adviser. His knowledge of data protection law is impressive but, best of all, he is able to advise about the regulator’s stance and the rationale behind the law. He is also incredibly responsive and gives matters his personal attention.”

Chambers Asia Pacific
TMT 2025 - Band 1 for 18 consecutive years

Lim Chong Kin - Leading Individual for 18 consecutive years

David N. Alfred - Leading Individual

Asia Pacific Legal 500
Data Protection & Cybersecurity 2025 - Tier 1; Tier 2 in 2024

David Alfred - Leading Individual for 2 consecutive years

Lim Chong Kin - Recommended Lawyer for 2 consecutive years

Anastasia Su-Anne Chen - Recommended Lawyer for 2 consecutive years

Indonesia | Makarim & Taira S.

The Legal 500 Asia-Pacific
TMT including Fintech 2025 – Highly recommended from 2018-2025

asialaw Profiles
Technology and Telecommunications 2023 - Highly recommended from 2019-2023

Malaysia | Shearn Delamore & Co.

Asialaw Profiles
Technology & Telecommunications 2020 – Highly recommended firm

Asia Pacific Legal 500
TMT 2025 - Tier 2

Thailand | Tilleke & Gibbins

Chambers Asia Pacific
Technology, Media, Telecoms (TMT) 2025 – Band 1 for 2 consecutive years; Band 2 for 5 consecutive years (2019-2023)

Athistha Chitranukroh – Band 1 for 2 consecutive years
Charuwan Charoonchitsathian – Band 2 for 2 consecutive years
Nopparat Lalitkomon – Associate to Watch for 2 consecutive years

  • “With a sharp legal mind and a keen attention to detail, I highly appreciate Nop's strategic approach to solving complex legal issues and achieving favourable outcomes for us.”
  • “She [Charuwan] is very active in working with us and very responsive in regards to our requests.”
  • “He [Nopparat] has a good understanding of Thai PDPA and can explain it clearly to us.

The Legal 500 Asia Pacific
TMT 2025 – Tier 1 for 12 consecutive years

Athistha (Nop) Chitranukroh – Leading partner

Nopparat Lalitkomon – Leading associate

  • “A very strong TMT practice.”
  • “A great team. Good knowledge of the law and practical.”
  • “Great understanding of the client's business, with a responsive and active approach.”

Asialaw Profiles
Technology and Telecoms 2024 – Outstanding for 9 consecutive years

Vietnam | Tilleke & Gibbins

Chambers Asia Pacific
Technology, Media, Telecoms (TMT) 2025 – Band 1 for 6 consecutive years

Waewpen Piemwichai – Spotlight

  • “Tilleke & Gibbins has a very good understanding of the regulatory regime in Vietnam. The firm gives very pragmatic and thorough advice and is easy to work with."

The Legal 500 Asia Pacific
Data Protection 2025 – Tier 1 for 5 consecutive years
TMT 2025 – Tier 1 for 7 consecutive years

Waewpen Piemwichai – Leading associate
Tram Ngoc Bich Nguyen – Recommended lawyer
Quang Minh Vu – Recommended lawyer
Anh Hoai Nguyen – Recommended lawyer

  • “They were extremely helpful in providing translations pertaining to all of the paperwork involved during our engagement, making our tasks easier despite the process mostly being in Vietnamese.”
  • “They were very quick in responding to our queries and provided comprehensive clarifications and legal advice whenever prompted. The team was pleasant to work with and made us feel comfortable in collaborating with them.”

Financial Times Innovative Lawyers APAC
Most Innovative Lawyers in Cybersecurity and Data Governance 2023 – Nominee

Cambodia | Tilleke & Gibbins

Leading publications and rating agencies have yet to introduce rankings in respect of Data Compliance and Cybersecurity legal practice in Cambodia.

Tilleke & Gibbins is ranked in the following related practice areas.

Chambers Asia Pacific
General Business Law 2025 – Band 2 for 5 consecutive years

Jay Cohen – Band 1; Band 2 for 2 consecutive years
David Mol – Associate to Watch

The Legal 500 Asia Pacific
General Business Law 2025 – Tier 2 for 8 consecutive years

Jay Cohen – Leading Individual for 5 consecutive years
David Mol – Next Generation Partner for 8 consecutive years
Nitikar Nith – Leading Associate

Asialaw Profiles
General Business Law 2024 – Highly Recommended for 7 consecutive years

Laos | Tilleke & Gibbins

Leading publications and rating agencies have yet to introduce rankings in respect of Data Compliance and Cybersecurity legal practice in Laos.

Tilleke & Gibbins is ranked in the following related practice areas.

Chambers Asia Pacific
General Business Law 2025 – Band 2 for 4 consecutive years

The Legal 500 Asia Pacific
General Business Law 2025 – Tier 1 for 8 consecutive years

Niti Muangkote – Leading associate
Prisna Sungwanna – Recommended lawyer

Asialaw Profiles
General Business Law 2024 – Recommended for 11 consecutive years

Myanmar | Tilleke & Gibbins

Leading publications and rating agencies have yet to introduce rankings in respect of Data Compliance and Cybersecurity legal practice in Myanmar.

Tilleke & Gibbins is ranked in the following related practice areas.

Chambers Asia Pacific
General Business Law 2025 – Band 4 for 6 consecutive years

The Legal 500 Asia Pacific
Corporate/M&A 2025 – Tier 1; Tier 2 for 8 consecutive years

Asialaw Profiles
General Business Law 2024 – Recommended for 5 consecutive years