Company: MASK
Filing Date: 2025-12-30
Form Type: F-1
Source: 0001185185-25-002198
Chunk: 108

Company: 3 E Network Technology Group Ltd
Filing Date: 2025-12-30
Form: F-1
Chunk 108
---
 PRC on Several Issues Concerning the Application of Law in Handling Criminal Cases of Infringing Personal Information, issued in May 2017 and implemented in June 2017, clarified certain standards for the conviction and sentencing of the criminals in relation to personal information infringement. In November 2016, the SCNPC promulgated the Cybersecurity Law of the PRC, or the Cybersecurity Law, which became effective on June 1, 2017. On October 28, 2025, the SCNPC issued the Decision to Amend the Cybersecurity Law of the PRC. The amended Cybersecurity Law will come into effect on January 1, 2026. The Cybersecurity Law requires that a network operator, which includes, among others, internet information services providers, take technical measures and other necessary measures in accordance with applicable laws and regulations and the compulsory requirements of the national and industrial standards to safeguard the safe and stable operation of its networks. We are subject to such requirements as we operate website and apps and providing certain internet services mainly through our website and apps. The Cybersecurity Law further requires internet information service providers to formulate contingency plans for network security incidents, report to the competent departments immediately upon the occurrence of any incident endangering cyber security and take corresponding remedial measures. Internet information service providers are also required to maintain the integrity, confidentiality and availability of network data. The Cybersecurity Law reaffirms the basic principles and requirements specified in other existing laws and regulations on personal data protection, such as the requirements on the collection, use, processing, storage and disclosure of personal data, and the requirements for internet information service providers to take technical and other necessary measures to ensure the security of personal information collected from being divulged, damaged or lost. Any violation of the Cybersecurity Law may subject the internet information service provider to warnings, fines, confiscation of illegal gains, revocation of licenses, shutdown of websites or criminal liabilities. 66 Furthermore, MIIT’s Rules on Protection of Personal Information of Telecommunications and Internet Users promulgated in July 2013 and implemented in September 2013, contain detailed requirements on the use and collection of personal information as well as security measures required to be taken by telecommunications business operators and internet information service providers. On June 28, 2016, the CAC promulgated the Administrative Provisions on Mobile Internet Applications Information Services, or the APP Provisions, which was implemented on August 1, 2016 and amended June 14, 2022. Under the APP Provisions