Norton Rose Fulbright (Asia) LLP
Related services and key industries
- Business ethics and anti-corruption
- Litigation and disputes
- Regulation and investigations
- Financial services and regulation
- Antitrust and competition
Jeremy Lua is a dual-qualified dispute resolution lawyer based in Singapore who focuses on regulatory investigations and compliance.
He is experienced in a broad range of complex regulatory investigations and compliance matters, including matters involving anti-bribery and corruption, anti-money laundering, sanctions, export controls and financial fraud. He has advised on matters relating to the Singapore Prevention of Corruption Act, and the Singapore Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act, the US Foreign Corrupt Practices Act, the UK Bribery Act and other regional anti-bribery laws.
Jeremy also focuses on data protection, cybersecurity and technology matters, often assisting clients in navigating crisis situations, such as responding to data breach and cybersecurity incidents.
Jeremy has represented and advised clients on investigations before government agencies in Singapore and overseas, such as the Singapore Corrupt Practices Investigation Bureau ("CPIB"), the Singapore Police Force ("SPF"), the Commercial Affairs Department ("CAD") of the SPF, the Personal Data Protection Commission of Singapore ("PDPC"), the U.S. Department of Justice ("DOJ") and the Securities and Exchange Commission ("SEC"), the Asian Development Bank (ADB) and other multilateral organisations.
He also advises clients on regulatory compliance matters, including designing and implementing compliance programs, policies and procedures, and on regulatory risk management and mitigation and follow-on disputes. He also advises corporate organizations and senior management on business ethics, corporate liability and personal liability.
Prior to joining the firm, Jeremy was a Deputy Public Prosecutor at the Attorney-General's Chambers of Singapore, with a focus on technology crime. As a technology crime prosecutor, Jeremy prosecuted offences under the Singapore Computer Misuse Act. He is experienced in dealing with evidential and other issues concerning technology.
Jeremy received his law degree from the National University of Singapore. He is fluent in both English and Mandarin Chinese. He is admitted as an Advocate & Solicitor in Singapore and as a solicitor in the Senior Courts of England and Wales.
- Advocate & Solicitor (Supreme Court of Singapore, practising under section 36E of the Legal Profession Act)
- Solicitor of the Senior Courts of England and Wales
- A US Nasdaq-listed technology company on a significant cross-border investigation into sales employees, business partners, and third parties relating to issues of forgery, corruption and violation of policies and regulations in various countries in Asia and Europe, and representing the company before the DOJ and SEC
- A North Asian Airline on a major cybersecurity incident involving third party attackers, which led to data belonging to millions of passengers being compromised, and representing the company in follow-on investigations initiated by data protection regulators, including the PDPC
- A global airline on its response to a data breach incident and assisting with crisis response, which necessitated self-notification to data protection regulators around the world, advising on its response to public stakeholders, and follow-on investigation initiated by data protection regulators, including the PDPC
- A US medical device company on internal investigations into whistleblower claims of employee misconduct in Malaysia and India
- A global storage company on an ongoing internal investigation into allegations of misconduct and bribery involving current and former employees of its operating company, including senior employees, and advising and representing the company in its cooperation with the CPIB
- A multinational logistics company on an internal investigation into environmental compliance issues, including on its self-report to local authorities
- A multinational power generation company on an internal investigation into whistleblower claims of employee misconduct in Bangladesh
- An Asian diversified conglomerate on multi-jurisdictional anti-corruption, AML and sanctions compliance matters in the context of a real estate transaction
- An operator of an online commodities trading platform on its obligations relating to trade sanctions and AML/CFT related matters
- Singapore's government backed investment entity in relation to its large technology transformation project, including advice on large-scale procurement as well as strategy legal review of the proposal technology's application to the business
- A Singapore based provider of aeronautical engineering services in respect of a ransomware incident affecting its US operations, including its forensic investigations into the incident, data breach management and incident response and on regulatory investigations, including the PDPC, arising out of the incident.
- A major Asian airline on a data breach incident and response
- A Hong Kong-listed multinational technology company on a significant multi-jurisdictional data security incident, including its investigations into the root cause of the incident, data breach management and incident response, follow-on disputes and on investigations initiated by regulators, including the PDPC, arising out of the incident
- A satellite operator on investigations initiated by a multi-lateral development bank in connection with an ongoing dispute with a state-linked entity
- Anti-Corruption Regulation, Singapore – Getting the Deal Through, 2017-2020
- "Deferred prosecution agreements; Justice delayed or justice denied?" The Business Times, 6 February 2018
- This time it's personal: Senior management liability in “books and records” offences
- Speaker, Singapore Insurance Brokers Association's Senior Management Retreat 2017 in Taipei, Taiwan, AML Trends and Development and Senior Management Liability, July 2017.
Speaker, The Legal 500 GC Summit Indonesia 2019 in Jakarta, Indonesia, A team effort: how GCs and external counsel can work together to manage big-ticket disputes and investigations, November 2019.
- Co Vice-Chairperson of the Law Society of Singapore's Cybersecurity & Data Protection Committee 2021
- Mandarin Chinese
Further details on measures and guidance regarding Singapore’s unilateral sanctions on Russia in response to its invasion of Ukraine
Publication | March 28, 2022
Publication | February 16, 2022
Publication | October 27, 2021
Publication | July 15, 2020