Company: LI
Filing Date: 2025-04-10
Form Type: 20-F
Source: 0001410578-25-000678
Chunk: 159

Company: Li Auto Inc.
Filing Date: 2025-04-10
Form: 20-F
Item: Item 4
Chunk 159
---
 cybersecurity review with the cybersecurity review office of CAC if national security will or may be affected. In addition, network platform operators who possess personal information of more than one million users and intend to be listed on a foreign stock exchange must be subject to the cybersecurity review. The government authorities may initiate the cybersecurity review against the operators if the authorities believe that the network products or services or data processing activities of such operators affect or may affect national security.
The Cybersecurity Review Measures further elaborate the factors to be considered when assessing the national security risks of the relevant activities, including, among others: (i) the risk of any critical information infrastructure being illegally controlled, interfered, or sabotaged; (ii) the harm to the business continuity of any critical information infrastructure caused by the disruption of supply of these products and services; (iii) the security, openness, transparency, and variety of sources of these products or services, the reliability of supply channels, and risks of supply interruptions due to factors such as politics, diplomacy, and trade; (iv) the level of compliance with PRC laws and regulations of the product and service providers; (v) the risk of core data, important data, or a large amount of personal information being stolen, leaked, destroyed, and illegally used or transferred cross-border; (vi) the risk of critical information infrastructure, core data, important data, or a large amount of personal information being affected, controlled, or maliciously used by foreign governments and the cyber information security risk in connection with public offering; and (vii) other factors that may adversely affect the security of critical information infrastructures, cybersecurity, or data security.
If the cybersecurity review office of CAC deems it necessary to conduct a cybersecurity review, it should complete a preliminary review (including reaching a suggestion for the review conclusion and sending the suggestion to the implementing body for the cybersecurity review mechanism and the relevant authorities for their comments) within 30 business days from the issuance of a written notice to the operator, or 45 business days for complicated cases. Upon the receipt of a review conclusion suggestion, the implementing body for the cybersecurity review mechanism and the relevant authorities for their comments should issue a written reply within 15 business days. If the cybersecurity review office of CAC and these authorities reach a consensus, the cybersecurity review office of CAC should inform the operator in writing; otherwise, the case will go through a special review procedure. The special review procedure should be completed within 90 business days, or longer for complicated cases.
On June 10,