Lillian Tsang MBA

Lillian is an experienced data protection and privacy lawyer who qualified in 2008. She advises clients on a broad range of matters - from strategic compliance with a global stance to day-to-day operations. Her role also includes Harper James' Head of DPOaaS division (Data Protection Officer as a Service), where we act as the external DPO for a business or provide support to existing DPOs.

I first specialised in data protection and privacy over 13 years ago as an in-house counsel for an insurance intermediary. Since then, I've loved helping clients navigate this ever-evolving area.

It's been exciting to see data protection laws change globally as a result of the EU GDPR. In one day, I can be advising a client on the CCPA in California, the CNIL in France, and then conducting risk assessments of India without leaving my desk!

Lillian's work includes reviewing policies, drafting agreements, conducting gap analyses, liaising with authorities, and more. Her experience spans many sectors and across organisations of all sizes, from start-ups to large multinationals, allowing her to offer pragmatic guidance on complex issues.

I love explaining concepts in plain language, helping clients see that data protection compliance is often a “win-win” for the clients and not just a tick-box exercise. Data protection isn't black and white, and this allows me to get into the nuances and find solutions.

At Harper James, I get to work with some incredibly innovative client technologies, which bring interesting data protection challenges that I relish solving.

Beyond the law, Lillian enjoys dining out and music festivals. She works with clients both nationally and internationally.