Centre for Information Policy Leadership
  • Home
  • About
    • Meet the Team
  • Membership
  • Events
  • Projects
    • AI Project
    • Brazil AI Project
    • Organizational Accountability
    • Protecting Children's Data Privacy >
      • Policy Paper I: International Issues & Compliance Challenges
    • EU GDPR Implementation >
      • Global Readiness Benchmarks for GDPR
    • Enabling Data Driven Innovation and Big Data >
      • Privacy Risk Management
      • Transparency and User Controls
      • Updating Core Privacy Principles
    • Role of the DPO
    • Enabling Global Data Flows
    • Regional Focus and Outreach >
      • Effective LGPD
  • Resources
    • CIPL White Papers
    • Public Consultations
    • CIPL Articles
    • Hunton Andrews Kurth Privacy & Information Security Law Blog
    • Corporate Digital Responsibility and Accountability
    • Regulatory Engagement
    • Artificial Intelligence
    • Digital Economy and Society
    • Cross-Border Data Transfer Mechanisms
    • GDPR Implementation
    • US Privacy Framework
  • CIPL Blog
  • Media
  • Careers
  • Contact Us
  • Home
  • About
    • Meet the Team
  • Membership
  • Events
  • Projects
    • AI Project
    • Brazil AI Project
    • Organizational Accountability
    • Protecting Children's Data Privacy >
      • Policy Paper I: International Issues & Compliance Challenges
    • EU GDPR Implementation >
      • Global Readiness Benchmarks for GDPR
    • Enabling Data Driven Innovation and Big Data >
      • Privacy Risk Management
      • Transparency and User Controls
      • Updating Core Privacy Principles
    • Role of the DPO
    • Enabling Global Data Flows
    • Regional Focus and Outreach >
      • Effective LGPD
  • Resources
    • CIPL White Papers
    • Public Consultations
    • CIPL Articles
    • Hunton Andrews Kurth Privacy & Information Security Law Blog
    • Corporate Digital Responsibility and Accountability
    • Regulatory Engagement
    • Artificial Intelligence
    • Digital Economy and Society
    • Cross-Border Data Transfer Mechanisms
    • GDPR Implementation
    • US Privacy Framework
  • CIPL Blog
  • Media
  • Careers
  • Contact Us
Picture

Sandra Liu
CIPL Fellow

Sandra is an experienced data protection lawyer with expertise gained from private, in-house, and regulatory sectors. She has dedicated herself to legal advisory, policy development, and the implementation of data protection in her legal and senior management career. 

She advises on data, technology, AI Governance, and data privacy risk mitigation. In her former leading role as Global Head of Privacy, Sandra provided strategic advice on data privacy-related matters across the London Stock Exchange Group (LSEG). She also held a position as a board member. Based in Hong Kong SAR, she had led the Group Data Privacy team that spread across different regions. Her team supported legal documentation, data privacy advice and implemented compliance framework globally (>70 countries) to facilitate digital projects and data businesses (particularly, digital identity and KYC). 

Sandra has worked for more than ten years at the Office for the Privacy Commissioner for Personal Data (PCPD) in Hong Kong SAR, focusing on data privacy law, enforcement, and policy. She has also been a member of both the International Association of Privacy Professionals (IAPP) Asia Advisory Board and the IAPP Examination Board. Sandra holds a Bachelor of Laws from the University of Hong Kong SAR and a Master of Laws (Comparative Chinese Laws) from City University. She speaks regularly at industry events and advocates risk-based data privacy.

Copyright © 2025 by the Centre for Information Policy Leadership at Hunton Andrews Kurth LLP.
Disclaimer | Privacy Policy | Cookies Policy | CA Privacy Notice | Contact
Picture
Picture