Company: ZHIHF
Filing Date: 2025-04-15
Form Type: 20-F
Source: 0001410578-25-000729
Chunk: 282

Company: Zhihu Inc.
Filing Date: 2025-04-15
Form: 20-F
Item: Item 4
Chunk 282
---
 collection or use, keep any collected information strictly confidential, and take technological and other measures to maintain the security of such information. Internet content provision operators are required to cease any collection or use of the user personal information, and de-register the relevant user account, when a given user stops using the relevant internet service. Internet content provision operators are further prohibited from divulging, distorting or destroying any such personal information, or selling or providing such information unlawfully to other parties.
The PRC Cybersecurity Law imposes specific data protection obligations on network operators, including not disclosing, tampering with, or damaging users’ personal information that they have collected, as well as the obligation to delete unlawfully collected information and to correct any inaccuracies. Moreover, internet operators are prohibited from providing users’ personal information to others without users’ consent. Information irreversibly processed to preclude identification of specific individuals is exempt from these rules. Also, the law introduces breach notification requirements that will be applicable to breaches involving personal information.
On February 4, 2015, the CAC promulgated the Provisions on the Administration of Account Names of Internet Users, which became effective on March 1, 2015. These provisions set forth the authentication requirements for the real identity of internet users by requiring users to provide their real names during the registration process. In addition, these provisions specify that internet information service providers are required by these provisions to accept public supervision, and promptly remove illegal and malicious information in account names, profile photos, introductions and other registration-related information reported by the public in a timely manner.
On January 23, 2019, the Office of the Central Cyberspace Affairs Commission, the MIIT, the Ministry of Public Security, and the SAMR jointly issued the Notice on Special Governance of Illegal Collection and Use of Personal Information via Apps, which restates the requirements of legal collection and use of personal information, encourages app operators to conduct security certifications, and encourages search engines and APP stores to clearly mark and recommend those certified Apps.
On August 22, 2019, the CAC issued the Regulations on Cyber Protection of Children’s Personal Information effective on October 1, 2019. Pursuant to these regulations, network operators are required to establish special policies and user agreements to protect children’s personal information, and to appoint special personnel in charge of protecting children’s personal information. Network operators who collect, use, transfer or disclose personal information of children are required to, in a prominent and clear way, notify and obtain consent from children’s