Company: PAVS
Filing Date: 2025-08-04
Form Type: 20-F
Source: 0001929980-25-000590
Chunk: 62

Company: Paranovus Entertainment Technology Ltd.
Filing Date: 2025-08-04
Form: 20-F
Item: Item 4
Chunk 62
---
 disputes regarding equity ownership; (4) issuers’ compliance with web security, data security, and other national security laws and regulations; (5) issuers’ filing and reporting obligations, such as obligation to file with the CSRC after it submits an application for initial public offering to overseas regulators, and obligation after offering or listing overseas to report to the CSRC material events including change of control or voluntary or forced delisting of the issuer; and (6) the CSRC’s authority to fine both issuers and their shareholders between 1 and 10 million RMB for failure to comply with the Trial Measures, including failure to comply with filing obligations or committing fraud and misrepresentation.

  32                 
  Table of Contents  

Pursuant to the PRC Cybersecurity Law, which was promulgated by the SCNPC on November 7, 2016 and took effect on June 1, 2017, personal information and important data collected and generated by a critical information infrastructure operator in the course of its operations in China must be stored in China, and if a critical information infrastructure operator purchases internet products and services that affects or may affect national security, it should be subject to cybersecurity review by the CAC. Due to the lack of further interpretations, the exact scope of “critical information infrastructure operator” remains unclear. On December 28, 2021, the CAC and other relevant PRC governmental authorities jointly promulgated the Cybersecurity Review Measures (the “new Cybersecurity Review Measures”) to replace the original Cybersecurity Review Measures. The new Cybersecurity Review Measures took effect on February 15, 2022. Pursuant to the new Cybersecurity Review Measures, if critical information infrastructure operators purchase network products and services, or network platform operators conduct data processing activities that affect or may affect national security, they will be subject to cybersecurity review. A network platform operator holding more than one million users/users’ individual information also shall be subject to cybersecurity review before listing abroad. The cybersecurity review will evaluate, among others, the risk of critical information infrastructure, core data, important data, or a large amount of personal information being influenced, controlled or maliciously used by foreign governments and risk of network data security after going public overseas. On September 24, 2024, the State Council promulgated the Regulations on the Network Data Security Administration (the “ Security Administration Regulations”), which came into effect on January 1, 2025. According to the Security Administration Regulations, network data processing activities refer to the collection, storage