Company: ABTS
Filing Date: 2025-09-11
Form Type: F-3/A
Source: 0001641172-25-027133
Chunk: 25

Company: Abits Group Inc
Filing Date: 2025-09-11
Form: F-3/A
Chunk 25
---
2, the CAC issued the Measures for Security Assessment of Cross-border Data Transfer, or the Data Outbound Transfer Measures, which took effect on September 1, 2022. According to the Data Outbound Transfer Measures, in addition to the self-risk assessment requirement for provision of any data outside mainland China, a data processor shall apply to the competent cyberspace department for data security assessment and clearance of outbound data transfer in any of the following events: (i) outbound transfer of important data by a data processor; (ii) outbound transfer of personal information by an operator of critical information infrastructure or a data processor which has processed more than one million users’ personal data; (iii) outbound transfer of personal information by a data processor which has made outbound transfers of more than 100,000 users’ personal information or more than 10,000 users’ sensitive personal information cumulatively since January 1 of the previous year; (iv) such other circumstances where ex-ante security assessment and evaluation of cross-border data transfer is required by the CAC.

On March 22, 2024, the CAC issued the Regulations on Promoting and Regulating Cross-Border Data Flows, effective on the same day (the “Data Flow Regulations”), which relaxes the control over the cross-border transfer of non-sensitive personal information, and exempts certain common international affairs scenarios from reviews of cross-border transfer of personal information. In accordance with the Data Outbound Transfer Measures, the Data Flow Regulations, and the related guidelines issued by the CAC, a data processor shall apply for a data security assessment and clearance of outbound data transfers in either of the following circumstances: (a) outbound transfer of personal information or important data by a CIIO; or (b) outbound transfer of important data by a non-CIIO data processor, or personal information by such a non-CIIO data processor who has made outbound transfers of more than one million users’ personal information (not including sensitive personal information), or more than 10,000 users’ sensitive personal information cumulatively since January 1 of the current year. Our mainland China subsidiary’s activity related to cross-border data transfer is limited to corporate records, including financial data and certain non-sensitive personal information of our employees (such as name, age, and resumes of such employees). From January 1, 2022 to the date of this prospectus, our mainland China subsidiary made outbound data transfers of significantly less than 10,000 users’ personal information cumulatively and did not