Company: DTSQ
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001641172-25-001417
Chunk: 76

Company: DT Cloud Star Acquisition Corp
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 76
---
 by securities companies and other securities service institutions, who provide such PRC domestic enterprises with securities services
during their overseas issuance and listing, should be stored in the PRC, and the transmission of any such working papers to recipients
outside China must be approved following the applicable PRC regulations.

In
addition, the PRC has proposed new rules in 2021 that would require companies collecting or holding large amounts of data to undergo
a cybersecurity review prior to listing in foreign countries, a move that would significantly tighten oversight over large China-based
internet companies. On November 14, 2021, the CAC publicly solicited comments on the Regulation on Network Data Security Management (Consultation
Draft), which stipulated that data processors that undertake data processing activities using internet networks within China are required
to apply for cybersecurity review if they conduct data processing activities that will or may have an impact on China’s national
security. The review is mandatory if the data processor controls more than 1 million users’ personal information and intends to
be listed in a foreign country, or if the data processor seeks to be listed in Hong Kong. As of the date of this Report, the Draft Regulation
on Network Data Security Management is published for public comments only, the final version and effective date of which are subject
to change with substantial uncertainty. On December 28, 2021, the CAC, jointly with 12 departments under the State Council, implemented
the Measures for Cybersecurity Review, which became effective on February 15, 2022. According to the Measures for Cybersecurity Review,
operators of critical information infrastructure purchasing network products and services, and data processors carrying out data processing
activities that affect or may affect China’s national security, are required to conduct a cybersecurity review. Operators, including
operators of critical information infrastructure and data processors, who control more than one million users’ personal information
must report to the Cyber Security Review Office for a cybersecurity review if they intend to be listed in a foreign country.

On
June 10, 2021, the Standing Committee of the PRC National People’s Congress (“SCNPC”), promulgated the PRC Data Security
Law, which took effect in September 2021. The PRC Data Security Law imposes data security and privacy obligations on entities and individuals
carrying out data activities, and introduces a data classification and hierarchical protection system based on the importance of data
in economic and social development, and the degree of harm it will cause to national security, public interests