Company: CHOW
Filing Date: 2025-03-19
Form Type: DRS/A
Source: 0001493152-25-010898
Chunk: 51

Company: ChowChow Cloud International Holdings Ltd
Filing Date: 2025-03-19
Form: DRS/A
Chunk 51
---
 by the CAC or CSRC nor any other PRC authorities for this Offering or required to obtain regulatory approval regarding the data privacy and personal information requirements from the CAC nor any other PRC authorities for ours and SCS’s operations in Hong Kong, we are subject to a variety of laws and other obligations regarding data privacy and protection in Hong Kong.

In particular, the Personal Data (Privacy) Ordinance (Chap. 486) of Hong Kong) (“PDPO”) imposes a duty on any data user who, either alone or jointly with other persons, controls the collection, holding, processing or use of any personal data which relates directly or indirectly to a living individual and can be used to identify that individual. Under the PDPO, data users shall take all practicable steps to protect the personal data they hold from any unauthorized or accidental access, processing, erasure, loss, or use. Once collected, such personal data should not be kept longer than necessary for the fulfilment of the purpose for which it is or is to be used and shall be erased if it is no longer required, unless erasure is prohibited by law or is not in the public interest. The PDPO also confers on the Privacy Commissioner for Personal Data (“Privacy Commissioner”) power to conduct investigations and institute prosecutions. The data protection principles (collectively, the “DPP”), which are contained in Schedule 1 to the PDPO, outline how data users should collect, handle, and use personal data, complemented by other provisions imposing further compliance requirements. The collective objective of DPPs is to ensure that personal data is collected on a fully informed basis and in a fair manner, with due consideration towards minimizing the amount of personal data collected. Once collected, the personal data should be processed in a secure manner and should only be kept for as long as necessary for the fulfilment of the purposes of using the data. Use of the data should be limited to or related to the original collection purpose. Data subjects are given certain rights, inter alia: (a) the right to be informed by a data user whether the data user holds personal data of which the individual is the data subject; (b) if the data user holds such data, to be supplied with a copy of such data; and (c) the right to request correction of any data they consider to be inaccurate. The Commissioner may carry out criminal investigations and institute prosecution for certain offenses. Depending on the severity of the cases, the Privacy Commissioner will decide whether to prosecute or refer cases involving