Company: ABTS
Filing Date: 2025-09-11
Form Type: F-3/A
Source: 0001641172-25-027133
Chunk: 47

Company: Abits Group Inc
Filing Date: 2025-09-11
Form: F-3/A
Chunk 47
---
 cannot rule out the possibility that PRC governmental authority may find that all entities like us are subject to such laws regardless of the nexus to China. If we or any of our subsidiaries were deemed to be noncompliant with the Data Security Law, the PIPL, and other relevant personal information and data security laws, we could become subject to fines and other government sanctions. Additionally, according to the Data Outbound Transfer Measures, in addition to the self-risk assessment requirement for provision of any data outside Mainland China, a data processor who transfers outbound important data and personal information collected and generated in its operations in mainland China shall apply to the relevant cyberspace department for data security assessment and clearance of outbound data transfer in any of the specified events: (i) outbound transfer of important data by a data processor; (ii) outbound transfer of personal information by an operator of critical information infrastructure or a data processor which has processed more than one million users’ personal data; (iii) outbound transfer of personal information by a data processor which has made outbound transfers of more than one hundred thousand users’ personal information or more than ten thousand users’ sensitive personal information cumulatively since January 1 of the previous year; and (iv) such other circumstances where ex-ante security assessment and evaluation of cross-border data transfer is required by the CAC. To promote cross-border data transfer, the CAC issued the Data Flow Regulations, and relaxes the control over the cross-border transfer of non-sensitive personal information. In accordance with the Data Outbound Transfer Measures, the Data Flow Regulations, and the relevant guidelines issued by the CAC in this regard, a data processor shall apply for a data security assessment and clearance of outbound data transfers in either of the following circumstances: (a) outbound transfer of personal information or important data by a CIIO; or (b) outbound transfer of important data by a non-CIIO data processor, or personal information by such a non-CIIO data processor who has made outbound transfers of more than one million users’ personal information (not including sensitive personal information), or more than 10,000 users’ sensitive personal information cumulatively since January 1 of the current year. Our management has assessed, in consultation with our PRC counsel, that our mainland China subsidiary’s activity related to cross-border data transfer is limited to corporate records, including financial data and certain non-sensitive personal information of our employees (such as resumes of certain employees). From January 1, 2022 to the date of this prospectus, our