Yixun Lu

I work on two connected things: helping multinational and PRC clients navigate cross-border data and regulatory compliance, and advising on the M&A and joint venture deals that often raise those same issues. On the data and regulatory side, I’ve run cross-border transfer filings (PIPL standard contracts, impact assessments) for clients across automotive, healthcare, and consumer electronics — including a clinical trial data transfer that needed regulator sign-off ahead of a hard deadline. I also build the frameworks behind this: personal information protection policies, incident response procedures, and training that’s actually usable by engineers and R&D teams, not just legal. A few investigations have come through this lane too — internal fraud, bribery, conflicts of interest — usually where compliance and legal overlap. On the deal side, I handle joint ventures, acquisitions, and restructurings in the USD 5–50 million range, for both investors and the companies they’re investing in. That means drafting and negotiating the transaction documents (SPAs, JV contracts, shareholders’ agreements), running due diligence and turning the findings into a workable deal structure, and coordinating signing through closing — including FIE conversions, liquidations, and asset transfers along the way. Sector focus: technology, manufacturing, automotive, and life sciences.

Two years doing cross-border M&A and data compliance work for multinational and PRC clients, mostly in technology and manufacturing. On the deal side, I worked on joint ventures and acquisitions in the USD 5–50 million range — drafting and negotiating transaction documents, running due diligence and writing up the findings, and coordinating with counsel across multiple jurisdictions on deals spanning 5+ countries at once. A few stand out: a EUR 6 billion EV battery plant investment in Morocco, an acquisition spanning legal and HR due diligence across 12 jurisdictions, and a medtech acquisition where I also handled the post-deal compliance clean-up. On the data side, I advised on PIPL and GDPR compliance, with a lot of hands-on CAC filing experience — PIPIAs, DPIAs, and the standard contracts that go with cross-border transfers. I also built compliance programs from scratch for a few clients: policies, privacy documentation, and training that non-legal teams could actually follow. Some internal investigations came through this work too. Started managing workstreams independently over time, and became the day-to-day contact for clients on several matters.

As legal intern, supported seniors in advising multinational and PRC clients on ongoing corporate, regulatory, and data compliance matters. General Corporate & Regulatory: Assisted with retainer-based corporate work, including registrations of changes, corporate governance updates, and day-to-day operational and regulatory inquiries. Prepared corporate filing documents and supporting materials for submission to government authorities. Supported advisory work across a range of business compliance issues, including employment, product labeling, mobile applications, and land acquisition and management. Data Protection & Technology Compliance: Supported data compliance projects for major automotive sector clients, with a focus on PRC data and cybersecurity regulations. Conducted legal research and drafted memoranda on app compliance, cross-border data transfers, “important data,” and regulatory issues relating to connected and autonomous vehicle data. Contributed to client alerts and business development materials on emerging data regulatory developments. Progressively took ownership of discrete tasks with limited supervision and worked as an integrated member of the team, contributing directly to client-facing deliverables.

-Reviewed, revised, and translated a wide range of commercial agreements and internal legal documents -Conducted legal research on regulatory and compliance issues across multiple areas, including e-commerce, cybersecurity, data protection, intellectual property, and employment -Supported the handling of government investigations and litigation matters in Mainland China, Taiwan, and Hong Kong, including preparing submission materials and liaising with authorities in Taiwan and Hong Kong via email and telephone -Assisted product teams on data protection and privacy compliance for Agoda’s mobile applications and WeChat mini programs -Worked with customer service teams to assess and respond to escalated customer complaints involving legal and regulatory considerations

PE/VC & General Corporate

PE/VC, Municipal Bonds, and General Corporate

Juris Master Scholarship (3 years in a row)