Eva Lu Associate

Contact details

Eva Lu

Eva Lu

T: +44 20 7809 2735 M: +44 20 7809 2735 Email Eva | vCard Office: London

Eva is a data and privacy expert with extensive experience working in private practice and in-house on complex data-related matters, ranging from regulatory and policy engagement to advisory and transactional matters.
  • Profile
  • Services

Eva's experience working in-house in highly complex multinational tech organisations enables her to understand the client’s perspective, and provide pragmatic, risk-based, strategic advice tailored to the business needs. She is well-versed in advising on all aspects of data and privacy matters, such as data sharing and international data transfers, transparency notices, documentation and accountability requirements, responding to data breaches, data subject rights requests, complaints and claims, e-Privacy matters such as marketing and cookies, and proactive engagements with the regulator and responding to regulator enquiries.

Eva has extensive experience working directly with the UK Information Commissioner’s Office, particularly on matters relating to children's privacy and AI. Eva has established a collaborative relationship with the ICO both engaging on policy discussions and consultations and responding to complaints and enquiries.

Eva has up-to-date understanding of the policy and regulatory landscape on AI and data generally, often beyond privacy. She is passionate about sharing knowledge and shaping public policy as it relates to innovative technologies, most recently on the Data Protection and Digital Information (No. 2) Bill, Online Safety Act, the UK Government’s AI White Paper, and the EU AI Act. This experience allows Eva to look around corners and take a holistic view when advising on data and privacy matters, particularly as it relates to forward looking regulatory requirements and responsible use of data.

Eva is dual-qualified in England & Wales and Australia.

  • Data protection and information

Managing a leading global online retailer's UK data-related complaints, ICO complaints and data protection claims. 

Acting as the primary point of contact with the ICO for a leading global online retailer for all privacy matters such as engagements, consultations, investigations, and complaints. 

Leading on the analysis and advocacy for the Data Protection and Digital Information (No. 2) Bill.

Advising on data protection risks relating to complex matters such as biometric data, children's data, AI, connected devices, and cameras and other tracking technologies.  

Advising on all marketing and cookie matters for a UK telecommunications company. 

Updating the employee privacy notice for COVID-related data processing, including where necessary for special category data. 

Leading on the creation of a video privacy notice relating to processing of children data. 

Updating data sharing agreement and transfer impact assessment templates for compliance with EU and UK requirements. 

Instigating the formation of an AI governance framework.    

More: Data protection and information

Latest news & insights

04 Apr 2024

From Insights

Data Protection update - March 2024

Welcome to the Stephenson Harwood Data Protection bulletin, covering the key developments in data protection law from March 2024.


© Stephenson Harwood LLP 2016. Any reference to Stephenson Harwood in this document means Stephenson Harwood LLP and/or its affiliated undertakings. Any reference to a partner is used to refer to a member of Stephenson Harwood LLP.