Nicole Lu is a Senior Director at Ankura based in Shanghai, with 10 years of experience in e-Discovery, digital forensic investigations in reply to regulatory response. She specializes in litigation support, leveraging professional forensic tools to manage electronic data, e-Discovery review workflows, and data production. Nicole is also highly experienced in cybersecurity assessments, cybersecurity compliance (China Cybersecurity Law, China Personal Information Protection Law, and Cross-border Data Transfer), and incident response. Additionally, she is skilled in data analytics and visualization, helping organizations identify fraud risks through corporate database analysis.
Education
- BSc, Finance, New York University
Certifications
- Relativity Certified Administrator
- EnCase Certified Examiner
Experience
Nicole’s professional experience includes, but is not limited to:
- e-Discovery: Led a large-scale offline, air-gapped e-Discovery review, collaborating with legal, compliance, security, and data engineering teams to ensure comprehensive data collection and processing was in line with legal standards. Set up a secure air-gapped environment to host the data review, ensuring data integrity and protection from external threats. Designed and implemented complex review workflows to ensure personal information redaction met regulatory requirements. Engaged in detailed discussions with the client to establish a cross-border data transfer protocol, leveraging extensive data privacy knowledge to ensure compliance with international data protection laws.
- Digital Forensics: Directed a large-scale email compromise investigation, successfully identifying the breach source and implementing enhanced security protocols to prevent future incidents. Conducted in-depth analysis of data leakage incidents, utilizing advanced forensic tools to trace data flow and pinpoint vulnerabilities, thereby strengthening the organization’s data protection measures.
- Cybersecurity and Data Privacy: Conducted cybersecurity capability assessments and privacy impact assessments for pharmaceutical, investment, and education sector clients. Participated in data breach reviews in response to PII leak incidents, advising on mitigation strategies and regulatory compliance.
- Data Analytics: Led data analytics projects for a domestic hospital system, analyzing health care database to detect suspicious activities. Identified irregular financial transactions, quantified their impact, and provided data-driven insights to strengthen fraud detection and risk management.
