Company: GURE
Filing Date: 2025-12-31
Form Type: S-3/A
Source: 0001193805-25-001804
Chunk: 49

Company: GULF RESOURCES, INC.
Filing Date: 2025-12-31
Form: S-3/A
Chunk 49
---
 Review (2021 version) was promulgated on December 28, 2021 and became effective on February 15, 2022. These measures specify that any “online platform operators” controlling the personal information of more than one million users which seek to list on a foreign stock exchange are subject to prior cybersecurity review. On November 14, 2021, the Cyberspace Administration of China (the “CAC”) published the Draft Regulations on the Network Data Security Administration (Draft for Comments) (the “Security Administration Draft”), which provides that data processing operators engaging in data processing activities that affect or may affect national security must be subject to cybersecurity review by the relevant Cyberspace Administration of the PRC. According to the Security Administration Draft, data processing operators shall apply for a cybersecurity review by the relevant Cyberspace Administration of the PRC under certain circumstances, such as (i) mergers, restructurings, and divisions of Internet platform operators that hold large amount of data relating to national security, economic development, or public interest which affects or may affect the national security, (ii) overseas listings of data processors that process personal data for more than one million individuals, (iii) Hong Kong listings of data processors that affect or may affect national security, and (iv) other data processing activities that affect or may affect the national security. The deadline for public comments on the Security Administration Draft was December 13, 2021. The PRC Data Security Law, which was promulgated by the Standing Committee of the National People’s Congress (the “SCNPC”) on June 10, 2021 and took effect on September 1, 2021, requires data collection to be conducted in a legitimate and proper manner, and stipulates that, for the purpose of data protection, data processing activities must be conducted based on data classification and hierarchical protection system for data security. On August 20, 2021, the SCNPC promulgated the Personal Information Protection Law of the People’s Republic of China, or the Personal Information Protection Law, which integrates the scattered rules with respect to personal information rights and privacy protection and took effect on November 1, 2021. Our business in China does not involve the collection of user data, implicate cybersecurity, or involve any other type of restricted industry. Based on our understanding of currently applicable PRC laws and regulations, our registered public offering in the U.S. is not subject to the review or prior approval of the CAC . As of the date of