Company: ZDAN
Filing Date: 2025-01-10
Form Type: DRS/A
Source: 0001683168-25-000168
Chunk: 192

Company: Zerolimit Technology Holding Co. Ltd.
Filing Date: 2025-01-10
Form: DRS/A
Chunk 192
---
 and network service providers. Network
data refers to all kinds of electronic data collected, stored, transmitted, processed and generated through the network. Personal information
refers to all kinds of information recorded electronically or by other means which can identify a natural person individually or in combination
with other information, including but not limited to the name, date of birth, identity document number, personal biometric information,
residential address, telephone number and other information of a natural person. Network operators shall maintain strict confidentiality
of user information collected by them and establish a sound system for the protection of user information. In order to regulate data
processing activities, safeguard data security, promote data development and utilization, protect the legitimate rights and interests
of individuals and organizations, and safeguard the state’s sovereignty, security and development interests, the Standing Committee
of the National People’s Congress promulgated the Data Security Law of the People’s Republic of China (the “Data Security
Law”) on June 10, 2021, which came into effect on September 1, 2021. The Data Security Law requires that data processing activities
shall be carried out in accordance with the law and shall not endanger national security or public interests, nor harm the legitimate
rights and interests of individuals or organizations. The State has established a data classification and classification protection system,
a data security assessment system, a data security emergency disposal mechanism and a data security audit system.

| 121 |

The Cyberspace Administration
of China, or the CAC, together with 12 other relevant regulators, jointly revised and promulgated on December 28, 2021 the Measures
for Cybersecurity Review, which took effect on February 15, 2022, replacing the old Measures for Cybersecurity Review which took effect
on June 1, 2020. The Measures for Cybersecurity Review requires network platform operators with personal information of more than one
million users to report to the Cyberspace Administration for cybersecurity review when they seek overseas listing. For operators of critical
information infrastructures purchasing network products and services which affect or may affect national security, they should report
to the Cyberspace Administration for cybersecurity review.

On July 7, 2022, the CAC
promulgated the Measures for the Security Assessment of Cross-Border Transfer of Data, which took effect on September 1, 2022. The Measures
aims to regulate the cross-border transfer of data, providing that, among other things, data processors that provide data overseas must