Company: SOS
Filing Date: 2025-07-02
Form Type: S-8
Source: 0001213900-25-061032
Chunk: 34

Company: SOS Ltd
Filing Date: 2025-07-02
Form: S-8
Chunk 34
---
 the discretion of PRC authorities.
Any failure to obtain or delay in obtaining such approval or completing such filing procedures for our offshore offerings, or a rescission
of any such approval or filing if obtained by us, may subject us to sanctions by the CSRC or other PRC regulatory authorities, which could
materially and adversely affect our business, results of operations, financial condition and prospects, as well as the trading price of
our listed securities. The CSRC or other PRC regulatory authorities also may take actions requiring us, or making it advisable for us,
to halt our offshore offerings before settlement and delivery of the shares offered. Consequently, if investors engage in market trading
or other activities in anticipation of and prior to settlement and delivery, they do so at the risk that settlement and delivery may not
occur. In addition, if the CSRC or other regulatory authorities later promulgate new rules or explanations requiring that we obtain their
approvals or accomplish the required filing or other regulatory procedures for our prior offshore offerings, we may be unable to obtain
a waiver of such approval requirements, if and when procedures are established to obtain such a waiver. Any uncertainties or negative
publicity regarding such approval requirement could materially and adversely affect our business, prospects, financial condition, reputation,
and the trading price of our listed securities.

<div align='center'>14</div>

Failure to comply with governmental regulations and other legal obligations concerning data protection and cybersecurity may materially and adversely affect our business.

We and the VIEs are subject
to PRC laws and regulations governing the collecting, storing, sharing, using, processing, disclosure and protection of data on the internet
and mobile platforms as well as cybersecurity. The PRC regulators, including the MIIT and the CAC, have been increasingly focused on regulation
in the areas of cybersecurity and data protection and governmental authorities have enacted a series of laws and regulations to enhance
the protection of privacy and data, which require certain authorization or consent from users prior to collection, use or disclosure of
their personal data and also protection of the security of the personal data of such users. The MIIT issued the Order for the Protection
of Telecommunications and Internet User Personal Information on July 16, 2013, requiring internet service providers to establish and publish
protocols relating to the collection or use of personal information, keep any collected information strictly confidential and take technological
and other measures to maintain the security of such information. Institutions and their employees are prohibited from selling or otherwise
illegally disclosing