Company: EJH
Filing Date: 2025-10-30
Form Type: 20-F
Source: 0001213900-25-104179
Chunk: 69

Company: E-Home Household Service Holdings Ltd
Filing Date: 2025-10-30
Form: 20-F
Item: Item 4
Chunk 69
---
 took effect on September 1, 2021. The Data Security
Law provides for data security and privacy obligations on entities and individuals carrying out data activities. Any organization or individual
that collects data shall do so in a lawful and legitimate manner and shall not obtain data by stealing or other illegal means. The Data
Security Law also introduces a data classification and hierarchical protection system based on the importance of data in economic and
social development, as well as the degree of harm it will cause to national security, public interests, or legitimate rights and interests
of individuals or organizations when such data is tampered with, destroyed, leaked, or illegally acquired or used, and appropriate level
of protection measures is required to be taken for the respective categories of data, for example, the processor of important data shall
designate the personnel and management institution responsible for the data security, carry out risk assessment for its data processing
activities and file the risk assessment report with the competent authorities. In addition, the Data Security Law provides for a national
security review procedure for those data activities that may affect national security and imposes export restrictions on certain data
and information.

On July 6, 2021, certain PRC regulatory authorities
issued Opinions on Strictly Cracking Down on Illegal Securities Activities to improve relevant laws and regulations on data security,
cross-border data transmission, and confidential information management. It provided that efforts will be made to revise the regulations
on strengthening the confidentiality and file management relating to the offering and listing of securities overseas, to implement the
responsibility on information security of overseas listed companies, and to strengthen the standardized management of cross-border information
provision mechanisms and procedures.

We have, in accordance with relevant provisions
on network security of the PRC, established necessary mechanisms to protect information security, including, among others, adopting necessary
network security protection technologies such as anti-virus firewalls, intrusion detection, and data encryption, keeping a record of network
logs, and implementing an information classification framework.

Regulations Relating to Privacy Protection

The Several Provisions on Regulating the Market
Order of Internet Information Services, issued by the Ministry of Industry and Information Technology in December 2011, provide that an
internet information service provider may not collect any user personal information or provide any such information to third parties without
the consent of a user. An internet information service provider must expressly inform the users of the method, content, and purpose of
the collection and processing of such user personal information, and may only collect such information