Company: CHNR
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001079973-25-000827
Chunk: 35

Company: CHINA NATURAL RESOURCES INC
Filing Date: 2025-05-15
Form: 20-F
Item: Item 3
Chunk 35
---
 cybersecurity review by the CAC when they seek a listing on a foreign exchange. The Cybersecurity Review Measures provide that critical information infrastructure operators purchasing network products and services and network platform operators carrying out data processing activities, which affect or may affect national security, shall apply for cybersecurity review to the applicable local cyberspace administration in accordance with the provisions thereunder.
 On July 30, 2021, the State Council promulgated the Regulations on Security Protection of Critical Information Infrastructure, which became effective on September 1, 2021. Pursuant to the Regulations on Security Protection of Critical Information Infrastructure, critical information infrastructure shall mean any important network facilities or information systems of an important industry or field, such as public communications and information services, energy, transportation, water conservation, finance, public services, e-government affairs and science and technology and national defense industries, which may seriously endanger national security, peoples’ livelihoods and the public interest in the event of damage, function loss or data leakage. In addition, the relevant administrative departments of each critical industry and sector shall be responsible for formulating eligibility criteria and determining the critical information infrastructure operator in the respective industry or sector. The operators shall be informed about the final determination as to whether they are categorized as critical information infrastructure operators. Among these industries, the energy and telecommunications industries are mandated to take measures to provide key assurances for the safe operation of critical information infrastructure in other industries and fields.
 We and our PRC subsidiaries do not carry out business in China through any self-owned network platform and hold personal information of less than one million individuals from PRC operations. We and our PRC subsidiaries have not been identified as critical information infrastructure operators by any PRC authorities. The data collected from our China operations is mainly information related to our production, customers, suppliers and our employees. We believe that we and our PRC subsidiaries do not commit any acts that threaten or endanger the national security of the PRC, and to our knowledge we and our PRC subsidiaries have not received or been subject to any investigation, notice, warning or sanction from any PRC authority with respect to national security issues arising from our business operations. As of the date of this annual report, we do not believe that we need to proactively apply for the cybersecurity review required by the CAC.
 Furthermore, the CAC promulgated the Security Assessment Measures for Outbound Data Transfers, which became effective on September 1, 2022, which require that to provide data abroad under any of the following circumstances, a data processor shall declare