Company: GDHLF
Filing Date: 2025-05-29
Form Type: 424B5
Source: 0001104659-25-053912
Chunk: 59

Company: GDS Holdings Ltd
Filing Date: 2025-05-29
Form: 424B5
Chunk 59
---
 subject to the cybersecurity review if their activities affect or may affect national security and network platform operators that hold personal information of over one million users shall apply with the Cybersecurity Review Office for a cybersecurity review before any public listing in a foreign country. For more details, please see “Item 4. Information on the Company — B. Business Overview — Regulatory Matters Related to Our Business — People’s Republic of China Regulations — Regulations Related to Information Security and Confidentiality of User Information” in our 2024 Annual Report. Any failure or delay in the completion of the cybersecurity review procedures or any other non-compliance with the cybersecurity related laws and regulations may result in fines or other penalties, including suspension of business, website closure, and revocation of prerequisite licenses, as well as reputational damage or legal proceedings or actions against us, which may have material adverse effect on our business, financial condition or results of operations. As of the date of this prospectus supplement, we have not been informed by any PRC governmental authority of any requirement that we file for a cybersecurity review. We have not been involved in any investigations on cybersecurity review initiated by the CAC or other competent authorities, and we have not received any inquiry, notice, warning, or sanction in such respect. However, there remains significant uncertainty in the interpretation and enforcement of relevant PRC cybersecurity laws and regulations. We cannot assure you that our future offering will be subject to cybersecurity review by the CAC or other competent authorities, and if so, we may not be able to pass such review.

We believe that we are in compliance with the regulations and policies that have been issued by the CAC and other competent PRC regulatory authorities on cybersecurity in all material respects as of the date of this prospectus supplement. We have formulated a cybersecurity management policy and information security management guidelines to comply with the requirements under the Cybersecurity Law. See “Item 16K. Cybersecurity” in our 2024 Annual Report for details on measures we have taken to manage information security risk. However, we cannot assure you that the measures we have taken or will take are adequate under the Cybersecurity Law or other cybersecurity related laws and regulations, and we may be held liable in the event of any breach of the relevant requirements under the Cybersecurity Law or other relevant laws and regulations. Furthermore, as uncertainties remain regarding the interpretation and implementation of applicable PRC laws and regulations, we cannot assure you that we will comply with such laws and regulations in all respects and we may be ordered to rectify or terminate any actions that are