Company: GDHLF
Filing Date: 2025-04-28
Form Type: 20-F
Source: 0001410578-25-000935
Chunk: 387

Company: GDS Holdings Ltd
Filing Date: 2025-04-28
Form: 20-F
Item: Item 16G
Chunk 387
---
 12 of Part XV of the SFO) in respect of disclosure of shareholders’ interests. As we have obtained a partial exemption from the SFC, the Hong Kong Stock Exchange granted a waiver from strict compliance with Rule 13.25B of the Hong Kong Listing Rules. We will disclose information about share repurchases, if any, in our quarterly earnings releases and annual reports on Form 20-F which are furnished or filed with the SEC in accordance with applicable U. S. rules and regulations.

ITEM 16H. MINE SAFETY

Not applicable.

ITEM 16I. DISCLOSURE REGARDING FOREIGN JURISDICTIONS THAT PREVENT INSPECTIONS

Not applicable.

ITEM 16J. INSIDER TRADING POLICIES

Our board of directors hasestablished insider trading policiesand procedures to provide guidance on the purchases, sales, and other dispositions of our securities by our directors, officers, employees and other relevant persons, with the goal of promoting compliance with applicable insider trading laws, rules and regulations, and the listing standards of Nasdaq and the Hong Kong Stock Exchange.

Our insider trading policies are filed as Exhibit 11.2 to this annual report on Form 20-F.

ITEM 16K. CYBERSECURITY

Cybersecurity Risk Management and Strategy

We have adopted a risk management and internal control system to manage the various risks that we face. Cybersecurity risk management is an important component of our overall risk management framework. We have
designed and implemented
a process for categorizing, classifying and handling cybersecurity incidents to enhance our cybersecurity risk management.

We have established an information security working mechanism, which is responsible for cybersecurity risk management, including information security, data security, privacy protection and supply chain cybersecurity risks, the assessment and management of significant risks posed by cybersecurity threats, as well as the prevention, monitoring, response and remediation of cybersecurity incidents. We have an independent information security team in our Information Technology Department that is dedicated to managing cybersecurity and data security risks. We have also engagedthird-partyservice providers to conduct independent cybersecurity audits and assessments periodically and on an ad hoc basis.

We have established management systems such as an information security management system, a privacy information management system and a business continuity system. We have also established a data security management system covering the full life cycle of data to effectively improve our data security risk management posture.

We have implemented various technical measures to timely identify and address cybersecurity threats. We have also established a Cybersecurity Operations Center and a team of professionals to monitor