Eva Lu

Associate

Eva is a data and privacy expert with extensive experience working in private practice and in-house on complex data-related matters, ranging from regulatory and policy engagement to advisory and transactional matters.

Eva's experience working in-house in highly complex multinational tech organisations enables her to understand the client’s perspective, and provide pragmatic, risk-based, strategic advice tailored to the business needs. She is well-versed in advising on all aspects of data and privacy matters, such as data sharing and international data transfers, transparency notices, documentation and accountability requirements, responding to data breaches, data subject rights requests, complaints and claims, e-Privacy matters such as marketing and cookies, and proactive engagements with the regulator and responding to regulator enquiries.

Eva has extensive experience working directly with the UK Information Commissioner’s Office, particularly on matters relating to children's privacy and AI. Eva has established a collaborative relationship with the ICO both engaging on policy discussions and consultations and responding to complaints and enquiries.

Eva has up-to-date understanding of the policy and regulatory landscape on AI and data generally, often beyond privacy. She is passionate about sharing knowledge and shaping public policy as it relates to innovative technologies, most recently on the Data Protection and Digital Information (No. 2) Bill, Online Safety Act, the UK Government’s AI White Paper, and the EU AI Act. This experience allows Eva to look around corners and take a holistic view when advising on data and privacy matters, particularly as it relates to forward looking regulatory requirements and responsible use of data.

Eva is dual-qualified in England & Wales and Australia.