Company: XCH
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0000950170-25-056976
Chunk: 82

Company: XCHG Ltd
Filing Date: 2025-04-23
Form: 20-F
Item: Item 4
Chunk 82
---
 such standards or requirements may also be confiscated, and in severe cases, an offender’s business license may be revoked.
On May 28, 2020, the National People’s Congress promulgated the Civil Code of the People’s Republic of China, or the PRC Civil Code, which took effect on January 1, 2021. Under the PRC Civil Code, if a product is found to be defective and to compromise the personal and property security of others, the victim may require compensation to be made by the manufacturer or the seller of the product. Where any manufacturer or seller knowingly produces or sells defective products or fails to take effective remedial measures in accordance with the PRC Civil Code and thus causes death or serious damage to the health of another person, such person shall be entitled to claim punitive damages. If the transporter or storekeeper is responsible for the matter, the manufacturer or seller shall have the right to demand compensation for its losses.

Regulations Relating to Cybersecurity and Data Security
According to the Cybersecurity Law of the PRC, or the Cybersecurity Law, which was promulgated by the SCNPC on November 7, 2016 and came into effect on June 1, 2017, network operators shall take all necessary measures in accordance with applicable laws, regulations and compulsory national requirements to safeguard the safe and stable operation of networks, respond to cybersecurity incidents effectively, prevent illegal and criminal activities, and maintain the integrity, confidentiality and usability of network data. The Cybersecurity Law also stipulates that the China adopts classified system for cybersecurity protection, under which network operators are required to fulfill relevant obligations of security protection to ensure that the network is free from interference, disruption or unauthorized access, and to prevent network data from being disclosed, stolen or tampered.
On July 22, 2020, the Ministry of Public Security issued the Guiding Opinions on Implementing the Cybersecurity Protection System and Critical Information Infrastructure Security Protection System to further improve the national cybersecurity prevention and control system. On December 28, 2021, the Cyberspace Administration of China, or the CAC and several other government authorities published the Revised Cybersecurity Review Measures, which came into effect on February 15, 2022 and replaced the previous version. Pursuant to these measures, the purchase of network products and services by a critical information infrastructure operator or the data processing activities of a network platform operator that affect or may affect national security will be subject to a cybersecurity review. In addition, network platform operators with personal information