Wenxun (Wendy) Pang

CIPP/E, CIPM, CISA, AICPA, The Chinese Qualified Legal Professional, Data Security and Privacy Protection Expert, Leading Multinational Financial Services Corporation

My destiny with data privacy protection started when I got my first job in EY China. From 2017 Oct. to 2020 Feb., I was a senior consultant in EY’s Cyber Security advisory Team, and I devoted myself to cybersecurity risk management, including but not limited to security strategy consulting, cyber security law compliance and personal information protection. I had involved in over 10 projects and acted as a core team member from assessment, design, implementation to operation. During this period, I grew up fast and offered privacy services to various industries’ clients, such as Finance, FMCG, Retail, High-tech, Education, etc., to help them establishing privacy protection framework from a very starting point by considering the much stricter China privacy monitoring environment.

In order to learn more actual data privacy controls and operations within a company, I joined IKEA China as a data privacy and information security specialist. During this work experience, I was responsible for perform various assessments for different projects, including but not limited to PIA/DPIA, Business impact assessment and information security assessment.

Last December, I joined Express Company, which is the joint venture of American Express and Lianlian Pay in China. As a data security expert, currently, I’m responsible for our company’s data security and privacy protection strategy and framework development, including but not limited to policies, processes, procedures, etc. and DPIA/PIA process development and implementation, etc.

With the rapid development and change in China privacy regulatory trend, I also actively participated in several privacy working group to perform in-depth study on the privacy regulatory trend and cooperation data privacy governance and hold sharing sessions with privacy experts to voice out in the Chinese social media platform, WeChat Official Account, to share our point of views.

My Sessions
September 23, 2021 8:00 AM
Global Data Protection and Privacy Law Developments: How Ready is China and the World for their new Data Security Law?

China's Data Security Law contains provisions that cover the usage, collection, and protection of data in the PRC. Violations will trigger penalty fines and even suspension of business and revocation of license or permits. This panel will explore this new law, an increasing likelihood of a Privacy Law, and what the future holds for China.

Speakers Include:

Host: Yasmin Hinds, Global Privacy Lead & Legal Counsel, Pontoon Solutions

Wenxun (Wendy) Pang, Data Security and Privacy Protection Expert

Rogier Creemers, Assistant Professor in the Law and Governance of China at Leiden University

Virat Patel, Managing Director, Pioneer Consulting Asia-Pacific