Company: OCG
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001213900-25-043484
Chunk: 46

Company: Oriental Culture Holding LTD
Filing Date: 2025-05-15
Form: 20-F
Item: Item 4
Chunk 46
---
 which became effective on June 1, 2017. Under this law, network operators must provide cybersecurity protection and protect
the integrity, confidentiality and availability of network data. The Cybersecurity Law also standardizes the collection and usage of personal
information and requires network operators to protect users’ privacy security. If a network operator violates the Cybersecurity
Law, it can face various penalties, including but not limited to warning, confiscation of illegal earnings, suspension of related business
for rectification, shutting down its websites, and revocation of its business license or relevant permits, all of which may be imposed
by the relevant authority, along with fines of up to RMB 1 million (approximately $146,000) depending on the severity of the circumstances.

On February 15, 2022, Cybersecurity Review Measures
published by Cyberspace Administration of China or the CAC, National Development and Reform Commission, Ministry of Industry and Information
Technology, Ministry of Public Security, Ministry of State Security, Ministry of Finance, Ministry of Commerce, People’s Bank of
China, State Administration for Market Regulation, State Administration of Radio and Television, China Securities Regulatory Commission,
State Secrecy Administration and State Cryptography Administration became effective, which provides that, Critical Information Infrastructure
Operators (“ CIIOs”) that intend to purchase internet products and services and Online Platform Operators engaging in data
processing activities that affect or may affect national security shall be subject to the cybersecurity review by the Cybersecurity Review
Office. On September 24, 2024, the State Council published the Administration Measures for Cyber Date Security, or the “ Cyber Data
Security Measure”, which requires cyber data processors to file a national security review if their cyber data processing activities
affect or may affect national security. On April 2, 2022, the CSRC released the Provisions on Strengthening Confidentiality and Archives
Administration of Overseas Securities Offering and Listing by Domestic Companies which became effective on March 31, 2023 and provides
that a domestic company that seeks to offer and list its securities in a overseas market shall strictly abide by applicable PRC laws and
regulations, enhance legal awareness of keeping state secrets and strengthening archives administration, institute a sound confidentiality
and archives administration system, and take necessary measures to fulfill confidentiality and archives administration obligations.

Measures for the Security Assessment of Data
Cross-border Transfer

On July 7, 2022, CAC promulgated the Measures
for the Security Assessment of Data Cross-border