Wenxun (Wendy) Pang CIPP/E, CIPM, CISA, AICPA

My destiny with data privacy protection started when I got my first job in EY China. From 2017 Oct. to 2020 Feb., I was a senior consultant in EY’s Cyber Security advisory Team, and I devoted myself to cybersecurity risk management, including but not limited to security strategy consulting, cyber security law compliance and personal information protection. I had involved in over 10 projects and acted as a core team member from assessment, design, implementation to operation. During this period, I grew up fast and offered privacy services to various industries’ clients, such as Finance, FMCG, Retail, High-tech, Education, etc., to help them establishing privacy protection framework from a very starting point by considering the much stricter China privacy monitoring environment.

In order to learn more actual data privacy controls and operations within a company, I joined IKEA China as a data privacy and information security specialist. During this work experience, I was responsible for perform various assessments for different projects, including but not limited to PIA/DPIA, Business impact assessment and information security assessment.

‍Last December, I joined Express Company, which is the joint venture of American Express and Lianlian Pay in China. As a data security expert, currently, I’m responsible for our company’s data security and privacy protection strategy and framework development, including but not limited to policies, processes, procedures, etc. and DPIA/PIA process development and implementation, etc.

‍With the rapid development and change in China privacy regulatory trend, I also actively participated in several privacy working group to perform in-depth study on the privacy regulatory trend and cooperation data privacy governance and hold sharing sessions with privacy experts to voice out in the Chinese social media platform, WeChat Official Account, to share our point of views.