Company: ZK
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001410578-25-000390
Chunk: 80

Company: ZEEKR Intelligent Technology Holding Ltd
Filing Date: 2025-03-20
Form: 20-F
Item: Item 3
Chunk 80
---
, consumer attitudes towards data privacy are constantly evolving, and consumer concerns about our collection of their data may adversely affect our ability to access data and improve our technologies, products, and services.
We collect and process personal information of more than 100,000 data subjects, which may be broadly defined as important data under the Provisions on MADS, in our on-premises servers as well as in cloud storages. We store such personal information or important data in China and do not transfer any users’ personal information or important data outside of China. In addition, we have submitted the risk assessment reports of 2022, 2023 and 2024 to relevant authorities at provincial levels.
Laws and regulations regarding the security assessment
On August 12, 2021, the MIIT issued the Opinion on Strengthening the Access Administration of Intelligent Connected Vehicles Manufacturing Enterprises and Their Products, or the Access Administration Opinion, which provided responsibilities of intelligent connected vehicles manufacturing enterprises, and required such enterprises to strengthen the management of vehicle data security, cyber security, software updates, function safety and intended function safety. Furthermore, the Access Administration Opinion stated that vehicles manufacturing enterprises shall conduct security assessment prior to transmitting data abroad.
On July 7, 2022, the CAC promulgated the Security Assessment Measures, which took effect on September 1, 2022. Pursuant to the Security Assessment Measures, a data processor shall apply to competent authorities for security assessment prior to transferring any data abroad if the transfer involves (i) important data; (ii) personal information transferred overseas by a CIIO and a data processor that has processed personal information of more than one million individuals; (iii) personal information transferred overseas by a data processor who has already provided personal information of 100,000 persons or sensitive personal information of 100,000 persons overseas since January 1 of the previous year; or (iv) other circumstances as requested by the CAC. Furthermore, on August 31, 2022, the CAC promulgated the Guidelines for filing the Outbound Data Transfer Security Assessment (Version 1), which provides that acts of outbound data transfer include (i) overseas transmission and storage by data processors of data generated during PRC domestic operations; (ii) the access to, use, download or export of the data collected and generated by data processors and stored in the PRC by overseas institutions, organizations or individuals; and (iii) other acts as specified by the CAC. On March 22, 2024, C