Company: DDC
Filing Date: 2025-10-24
Form Type: F-1
Source: 0001213900-25-102214
Chunk: 25

Company: DDC Enterprise Ltd
Filing Date: 2025-10-24
Form: F-1
Chunk 25
---
 we may have to incur substantial additional expenses for the well -beingof our employees. The spread of any severe infections disease in China or the United States may also affect the operations of our suppliers, distributors and customers, causing delivery disruptions, which could in turn adversely affect our operating results. We may be liable for improper collection, use or appropriation of personal information provided by our customers. Our business involves collecting and retaining large volumes of customer data, including personal information as our various information technology systems enter, process, summarize and report such data. We also maintain information about various aspects of our operations. The integrity and protection of our customer and company data is critical to our business. Our customers expect that we will adequately protect their personal information. We are required by applicable laws to keep strictly confidential the personal information that we collect, and to take adequate security measures to safeguard such information. The PRC Criminal Law, as amended by its Amendment 7 (effective on February 28, 2009) and Amendment 9 (effective on November 1, 2015), prohibits any person from selling or providing a citizen’s personal information obtained during the course of performing duties or providing services, or obtaining such information through theft or other illegal ways. On November 7, 2016, the SCNPC issued the Cyber Security Law of the PRC, or the Cyber Security Law, which became effective on June 1, 2017. Pursuant to the Cyber Security Law, network operators must not, without users’ consent, collect their personal information, and may only collect users’ personal information necessary to provide their services. Providers are also obliged to provide security maintenance for their products and services and shall comply with provisions regarding the protection of personal information as stipulated under the relevant laws and regulations. The Civil Code of the PRC (issued by the PRC National People’s Congress on May 28, 2020 and effective from January 1, 2021) provides main legal basis for privacy and personal information infringement claims under the Chinese civil laws. PRC regulators, including the Cyberspace Administration of China, MIIT, and the Ministry of Public Security have been increasingly focusing on regulation in the areas of data security and data protection. The PRC regulatory requirements regarding cybersecurity are constantly evolving. For instance, various regulatory bodies in China, including the Cyberspace Administration of China, the Ministry of Public Security and State Administration for Market Regulation, or the SAMR, have enforced data privacy and protection laws and regulations with varying and evolving standards and interpretations.