Company: MASK
Filing Date: 2025-12-02
Form Type: POS AM
Source: 0001185185-25-001899
Chunk: 83

Company: 3 E Network Technology Group Ltd
Filing Date: 2025-12-02
Form: POS AM
Chunk 83
---
security Review (2021) further requires that critical information infrastructure operators and data processing operators that possess personal data of at least one million users must apply for a review by the Cybersecurity Review Office of the PRC before conducting listings in foreign countries.

On September 24, 2024, the CAC published the Data Security Management Regulations , which provides that data processing operators engaging in data processing activities that affect or may affect national security must be subject to network data security review by the relevant Cyberspace Administration of the PRC. According to the Data Security Management Regulations, data processing operators who possess personal data of at least one million users or collect data that affects or may affect national security must be subject to network data security review by the relevant Cyberspace Administration of the PRC. On July 7, 2022, the CAC promulgated the Measures for the Security Assessment of Outbound Data Transfers, or the Measures, which became effective from September 1, 2022. The Measures shall apply to the security assessment of the provision of important data and personal information collected and generated by data processors in the course of their operations within the territory of the PRC by such data processors to overseas recipients. The Measures stipulates the circumstances under which security assessment of outbound data transfers should be declared, including: (i) outbound transfer of important data by a data processor; (ii) outbound transfer of personal information by a critical information infrastructure operator or a personal information processor who has processed the personal information of more than one million people; (iii) outbound transfer of personal information by a personal information processor who has made outbound transfers of the personal information of 100,000 people cumulatively or the sensitive personal information of 10,000 people cumulatively since January 1 of the previous year; or (iv) other circumstances where an application for the security assessment of an outbound data transfer is required as prescribed by the national cyberspace administration authority. Based on the relevant regulations relating to outbound data transfer in the Cybersecurity Law, the Data Security Law, and the Personal Information Protection Law, the Measures provide the scope, conditions and procedures of security assessment of outbound data transfer and thereby provide specific guidelines for security assessment of outbound data transfers.

We believe that we are in compliance with the current data security, cybersecurity, and other regulations and policies issued by the CAC, and we have not received any inquiry, notice, warning, or sanctions from the CAC or other PRC governmental authorities for violation of those regulations or policies to date.