Company: ZDAN
Filing Date: 2025-02-18
Form Type: DRS/A
Source: 0001683168-25-001085
Chunk: 193

Company: Zerolimit Technology Holding Co. Ltd.
Filing Date: 2025-02-18
Form: DRS/A
Chunk 193
---
 and shall not endanger national security or public interests, nor harm the legitimate
rights and interests of individuals or organizations. The State has established a data classification and classification protection system,
a data security assessment system, a data security emergency disposal mechanism and a data security audit system.

| 121 |

The Cyberspace Administration
of China, or the CAC, together with 12 other relevant regulators, jointly revised and promulgated on December 28, 2021 the Measures for
Cybersecurity Review, which took effect on February 15, 2022, replacing the old Measures for Cybersecurity Review which took effect on
June 1, 2020. The Measures for Cybersecurity Review requires network platform operators with personal information of more than one million
users to report to the Cyberspace Administration for cybersecurity review when they seek overseas listing. For operators of critical
information infrastructures purchasing network products and services which affect or may affect national security, they should report
to the Cyberspace Administration for cybersecurity review.

On July 7, 2022, the CAC
promulgated the Measures for the Security Assessment of Cross-Border Transfer of Data, which took effect on September 1, 2022. The Measures
aims to regulate the cross-border transfer of data, providing that, among other things, data processors that provide data overseas must
apply for security assessment if: (i) the data processors provide important data overseas; (ii) the critical information infrastructure
operators and the data processors that process personal information of more than 1 million people provide personal information overseas;
(iii) the data processors, which have provided personal information of 100,000 people or sensitive personal information of 10,000 people
overseas since January 1st of the previous year, provide personal information overseas; and (iv) other situations required to apply for
security assessment as stipulated by the CAC and related authorities. Besides, the Measures also requires data processors to carry out
self-assessment of the risk of providing data overseas before applying for the security assessment.

According to the Security
Protection Measures on Critical Information Infrastructure promulgated by the State Council on July 30, 2021 and came into effect on
September 1, 2021, a “critical information infrastructure” has the meaning of an important network facility and information
system in important industries such as public communications and information services, energy, transportation, water conservancy, finance,
public services, e-government, national defense technology