Company: OCG
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001213900-25-043484
Chunk: 47

Company: Oriental Culture Holding LTD
Filing Date: 2025-05-15
Form: 20-F
Item: Item 4
Chunk 47
---
 Transfer, effective on September 1, 2022, which requires the data processors to apply
for data cross-border security assessment coordinated by the CAC under the following circumstances: (i) any data processor transfers important
data to overseas; (ii) any critical information infrastructure operator or data processor who processes personal information of over 1
million people provides personal information to overseas; (iii) any data processor who provides personal information to overseas and has
already provided personal information of more than 100,000 people or sensitive personal information of more than 10,000 people to overseas
since January 1st of the previous year and; and (iv) other circumstances under which the data cross-border transfer security assessment
is required as prescribed by the CAC.

Personal Information Protection Law of the PRC

On August 20, 2021, the SCNPC promulgated the
Personal Information Protection Law of the People’s Republic of China (the “ Personal Information Protection Law”), effective
from November 1, 2021. The Personal Information Protection Law requires, among others, that (i) the processing of personal information
should have a clear and reasonable purpose which should be directly related to the processing purpose, in a method that has the least
impact on personal rights and interests, and (ii) the collection of personal information should be limited to the minimum scope necessary
to achieve the processing purpose to avoid the excessive collection of personal information. Different types of personal information and
personal information processing will be subject to various rules on consent, transfer, and security. Entities handling personal information
bear responsibilities for their personal information handling activities, and shall adopt necessary measures to safeguard the security
of the personal information they handle. Otherwise, the entities handling personal information could be ordered to correct, or suspend
or terminate the provision of services, and face confiscation of illegal income, fines or other penalties.

Hong Kong Regulations

As we provide a trading service business in Hong
Kong, our business operations are subject to various regulations and rules promulgated by the Hong Kong government. The following is a
brief summary of the Hong Kong laws and regulations that currently and materially affect our business. This section does not purport to
be a comprehensive summary of all present and proposed regulations and legislation relating to the industries in which we operate.

Hong Kong Laws and Regulations relating to Protection of Personal
Data

Personal Data (Privacy) Ordinance(Chapter
486 of the Laws of Hong Kong) (“ PDPO”), which came into full