Company: CHNR
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001079973-25-000827
Chunk: 36

Company: CHINA NATURAL RESOURCES INC
Filing Date: 2025-05-15
Form: 20-F
Item: Item 3
Chunk 36
---
 security assessment for its outbound data transfer to the CAC through the local cyberspace administration at the provincial level: (i) where a data processor provides critical data abroad; (ii) where a key information infrastructure operator or a data processor processing the personal information of more than one million individuals provides personal information abroad; (iii) where a data processor has provided personal information of 100,000 individuals or sensitive personal information of 10,000 individuals in total abroad since January 1 of the previous year; and (iv) in other circumstances prescribed by the CAC for which declaration of a security assessment for outbound data transfers is required. As we and our PRC subsidiaries do not provide any data collected from China operations abroad, we do not believe it is necessary for us to declare any security assessments pursuant to the Security Assessment Measures for Outbound Data Transfers.
 However, there remains uncertainty as to how these regulations will be interpreted or implemented and whether the PRC regulatory agencies, including the CAC, may adopt new laws, regulations, rules or detailed implementation and interpretation, and there is no assurance that PRC regulatory agencies, including the CAC, would take the same view as we do. There have not been comparable developments in Hong Kong, but those could occur, and we believe we are currently in compliance with all Hong Kong laws and regulations regarding data security. If any such new laws, regulations, rules or implementation and interpretation come into effect, we will take all reasonable measures and actions to comply and to minimize the adverse effect of such laws on us. However, we cannot assure you that we can fully or timely comply with such laws. In the event that we are subject to any mandatory cybersecurity reviews and/or other requirements of the CAC, we face uncertainty as to whether any clearance or other required actions can be timely completed, or at all. Given such uncertainty, it is possible that we may be required to suspend the relevant business, or face other penalties, which could materially and adversely affect our business, financial condition, results of operations and/or the value of our securities, or could significantly limit or completely hinder our ability to offer or continue to offer securities to investors. As of the date of this annual report, we have not been informed that we have been identified as a critical information infrastructure operator by any governmental authorities. These laws and regulations are still new and there is uncertainty with respect to the interpretation and implementation of these data security laws and regulations. We will closely monitor the relevant regulatory environment and will assess and determine whether we are required to apply