Company: NBRG
Filing Date: 2025-05-09
Form Type: DRS
Source: 0001213900-25-041372
Chunk: 128

Company: Newbridge Acquisition Ltd
Filing Date: 2025-05-09
Form: DRS
Chunk 128
---
 relevant PRC regulatory authorities. As of the date of this offering memorandum, we have not been involved in any investigations on cybersecurity review made by the CAC on such basis, and we have not received any inquiry, notice, warning, or sanctions in such respect. For the further purposes of regulating data processing activities, safeguarding data security, promoting data development and utilization, protecting the lawful rights and interests of individuals and organizations, and maintaining national sovereignty, security, and development interests, the Standing Committee of the National People’s Congress of China, or the SCNPC, published the Data Security Law, which took effect on September 1, 2021. The Data Security Law introduces a data classification and hierarchical protection system based on the importance of data in economic and social development, and the degree of harm it may cause to national security, public interests, or legitimate rights and interests of individuals or organizations if such data are tampered with, destroyed, leaked, illegally acquired or illegally used. The appropriate level of protection measures is required to be taken for each respective category of data. Moreover, the Data Security Law provides a national security review procedure for those data activities which affect or may affect national security and imposes export restrictions on certain data and information. In addition, the Data Security Law also provides that any organization or individual within the territory of the PRC shall not provide any foreign judicial body and law enforcement body with any data without the approval of the competent PRC governmental authorities. If we select a business combination target that operates in the PRC, the approval of the Cybersecurity Review Office (“CRO”), the Central Cyberspace Affairs Commission and / or other PRC authority may be required for our initial business combination under PRC law. In April 2020, the CAC and certain other PRC regulatory authorities promulgated the Measures for Cybersecurity Review, which requires that operators of critical information infrastructure must pass a cybersecurity review when purchasing network products and services which do or may affect national security. On January 4, 2022, the CAC, in conjunction with 12 other government departments issued the New Measures for Cybersecurity Review (the “New Measures”). The New Measures, which became effective on February 15, 2022, amends the Measures for Cybersecurity Review (Draft Revision for Comments) released on July 10, 2021. The New Measures require that certain operators of data processing activities that affect or may affect national security or that handle personal information of more than one million users must apply for cybersecurity review to the Cyber