Company: CHNR
Filing Date: 2025-05-15
Form Type: 424B5
Source: 0001079973-25-000830
Chunk: 73

Company: CHINA NATURAL RESOURCES INC
Filing Date: 2025-05-15
Form: 424B5
Chunk 73
---
 16 |

Failure to comply with PRC regulations
and other legal obligations concerning data protection and cybersecurity may materially and adversely affect our business, as we routinely
collect, store and use data during the conduct of our business.

On December 28, 2021,
the CAC adopted the Cybersecurity Review Measures, which became effective on February 15, 2022. The Cybersecurity Review Measures
require network platform operators possessing personal information of more than one million individual users to undergo a cybersecurity
review by the CAC when they seek a listing on a foreign exchange. The Cybersecurity Review Measures provide that critical information
infrastructure operators purchasing network products and services and network platform operators carrying out data processing activities,
which affect or may affect national security, shall apply for cybersecurity review to the applicable local cyberspace administration in
accordance with the provisions thereunder.

On July 30, 2021, the
State Council promulgated the Regulations on Protection of Critical Information Infrastructure, which became effective on September 1,
2021. Pursuant to the Regulations on Protection of Critical Information Infrastructure, critical information infrastructure shall mean
any important network facilities or information systems of an important industry or field, such as public communications and information
services, energy, transportation, water conservation, finance, public services, e-government affairs and science and technology and national
defense industries, which may seriously endanger national security, peoples’ livelihoods and the public interest in the event of
damage, function loss or data leakage. In addition, the relevant administrative departments of each critical industry and sector shall
be responsible for formulating eligibility criteria and determining the critical information infrastructure operator in the respective
industry or sector. The operators shall be informed about the final determination as to whether they are categorized as critical information
infrastructure operators. Among these industries, the energy and telecommunications industries are mandated to take measures to provide
key assurances for the safe operation of critical information infrastructure in other industries and fields. We believe our wastewater
treatment activities do not fall under the water conservation industry, although we cannot assure you that local administrative departments
will come to the same interpretation.

We and our PRC subsidiaries
do not carry out business in China through any self-owned network platform and hold personal information of less than one million individuals
from PRC operations. We and our PRC subsidiaries have not been identified as critical information infrastructure operators by any PRC
authorities. The data collected from our China operations is mainly information related to our production, customers, suppliers and our