Company: SSEA
Filing Date: 2025-07-07
Form Type: S-1/A
Source: 0001829126-25-004904
Chunk: 138

Company: STARRY SEA ACQUISITION CORP
Filing Date: 2025-07-07
Form: S-1/A
Chunk 138
---
 be prevented from pursuing certain investment opportunities.

The PRC regulatory framework for data security and personal information protection is evolving. For instance, various regulatory bodies in China, including the CAC, the Ministry of Public Security and the State Administration for Market Regulation, have enforced data privacy and protection laws and regulations with varying and evolving standards and interpretations.

For instance, on November 7, 2016, the Standing Committee of the National People’s Congress (“SCNPC”) promulgated the PRC Cybersecurity Law, which came into effect on June 1, 2017, and applies to the construction, operation, maintenance and use of networks as well as the supervision and administration of cybersecurity within the territory of China. In April 2020, the PRC government promulgated the Cybersecurity Review Measures, which came into effect on June 1, 2020. Pursuant to the Cybersecurity Review Measures, operators of critical information infrastructure must pass a cybersecurity review when purchasing network products and services which do or may affect national security. On June 10, 2021, the SCNPC promulgated the PRC Data Security Law, which took effect on September 1, 2021. The PRC Data Security Law imposes data security and privacy obligations on entities and individuals carrying out data activities, and introduces a data classification and hierarchical protection system based on the importance of data in economic and social development, and the degree of harm it will cause to national security, public interests, or legitimate rights and interests of individuals or organizations when such data is tampered with, destroyed, leaked, illegally acquired or used. The PRC Data Security Law also provides for a national security review procedure for data activities that may affect national security and imposes export restrictions on certain data. In July 2021, the State Council of the PRC promulgated the Regulations on the Protection of the Security of Critical Information Infrastructure, which became effective on September 1, 2021. Pursuant to this regulation, critical information infrastructure means key network facilities or information systems of critical industries or sectors, such as public communication and information service, energy, transportation, water conservation, finance, public services, e-government affairs and national defense science, the damage, malfunction or data leakage of which may endanger national security, people’s livelihoods and the public interest.

<div align='center'>80</div>

On August 20, 2021, the SCNPC passed the PRC Personal Information Protection Law (the “PIPL”), which took effect on November 1,