Grace Tang
Overview
Grace Tang is an associate in Crowell & Moring’s Privacy and Cybersecurity Group, advising clients across a range of industries on technology and privacy-related legal matters. She combines her experience in technology with a strong foundation in privacy as clients often face an overlapping and increasingly complex regulatory landscape – particularly in areas such as online safety and artificial intelligence.
Career & Education
- University of Law, LPC, 2021
- London School of Economics and Political Science (LSE), LLB Law, 2018
- Solicitor, England and Wales, 2023
Grace's Insights
Client Alert | 5 min read | 10.19.26
To Fine or Not to Fine: EDPB Confirms Default Position in GDPR Enforcement Should Be to Fine
On 17 September 2026, the European Data Protection Board (“EDPB”) published its draft Guidelines 04/2026 on the imposition of administrative fines (the "Guidelines"), currently out for public consultation until 13 November 2026. In 2022, the EDPB had adopted guidelines on calculating the amount of an administrative fine (the “Calculation Guidelines”). The present Guidelines fill a gap the Calculation Guidelines left open: they provide a structured, five-step methodology for deciding when to impose a fine and explain how fines interact with the full range of corrective powers. By issuing both sets of guidelines, the EDPB aims to increase harmonization in fining posture.
Client Alert | 4 min read | 08.14.26
License to Hack? The White House Greenlights Private-Sector Offensive Cyber Operations
Client Alert | 13 min read | 06.12.26
Publication | 05.28.26
Insights
DPRK Threat Actors Target European Drone Makers
|10.28.25
Crowell & Moring’s Transportation Law: Moving Forward
Grace's Insights
Client Alert | 5 min read | 10.19.26
To Fine or Not to Fine: EDPB Confirms Default Position in GDPR Enforcement Should Be to Fine
On 17 September 2026, the European Data Protection Board (“EDPB”) published its draft Guidelines 04/2026 on the imposition of administrative fines (the "Guidelines"), currently out for public consultation until 13 November 2026. In 2022, the EDPB had adopted guidelines on calculating the amount of an administrative fine (the “Calculation Guidelines”). The present Guidelines fill a gap the Calculation Guidelines left open: they provide a structured, five-step methodology for deciding when to impose a fine and explain how fines interact with the full range of corrective powers. By issuing both sets of guidelines, the EDPB aims to increase harmonization in fining posture.
Client Alert | 4 min read | 08.14.26
License to Hack? The White House Greenlights Private-Sector Offensive Cyber Operations
Client Alert | 13 min read | 06.12.26
Publication | 05.28.26
