Company: ZDAN
Filing Date: 2025-06-30
Form Type: F-1
Source: 0001683168-25-004840
Chunk: 194

Company: Zerolimit Technology Holding Co. Ltd.
Filing Date: 2025-06-30
Form: F-1
Chunk 194
---

of China, or the CAC, together with 12 other relevant regulators, jointly revised and promulgated on December 28, 2021 the Measures for
Cybersecurity Review, which took effect on February 15, 2022, replacing the old Measures for Cybersecurity Review which took effect on
June 1, 2020. The Measures for Cybersecurity Review requires network platform operators with personal information of more than one million
users to report to the Cyberspace Administration for cybersecurity review when they seek overseas listing. For operators of critical
information infrastructures purchasing network products and services which affect or may affect national security, they should report
to the Cyberspace Administration for cybersecurity review.

On July 7, 2022, the CAC
promulgated the Measures for the Security Assessment of Cross-Border Transfer of Data, which took effect on September 1, 2022. The Measures
aims to regulate the cross-border transfer of data, providing that, among other things, data processors that provide data overseas must
apply for security assessment if: (i) the data processors provide important data overseas; (ii) the critical information infrastructure
operators and the data processors that process personal information of more than 1 million people provide personal information overseas;
(iii) the data processors, which have provided personal information of 100,000 people or sensitive personal information of 10,000 people
overseas since January 1st of the previous year, provide personal information overseas; and (iv) other situations required to apply for
security assessment as stipulated by the CAC and related authorities. Besides, the Measures also requires data processors to carry out
self-assessment of the risk of providing data overseas before applying for the security assessment.

According to the Security
Protection Measures on Critical Information Infrastructure promulgated by the State Council on July 30, 2021 and came into effect on
September 1, 2021, a “critical information infrastructure” has the meaning of an important network facility and information
system in important industries such as public communications and information services, energy, transportation, water conservancy, finance,
public services, e-government, national defense technology, etc., as well as other important network facilities and information systems
that may seriously endanger national security, the national economy, the people’s livelihood, or the public interests in the event
of damage, loss of function, or data leakage. The protection departments shall organize the identification of critical information infrastructures
in