Company: RAYA
Filing Date: 2025-08-01
Form Type: 424B5
Source: 0001213900-25-070321
Chunk: 155

Company: Erayak Power Solution Group Inc.
Filing Date: 2025-08-01
Form: 424B5
Chunk 155
---
 products and services and shall comply
with provisions regarding the protection of personal information as stipulated under the relevant laws and regulations.

The Civil Code of the PRC (issued by the PRC National
People’s Congress on May 28, 2020 and effective from January 1, 2021) provides main legal basis for privacy and personal information
infringement claims under the Chinese civil laws. PRC regulators, including the Cyberspace Administration of China, MIIT, and the Ministry
of Public Security have been increasingly focused on regulation in the areas of data security and data protection.

The PRC regulatory requirements regarding cybersecurity
are constantly evolving. For instance, various regulatory bodies in China, including the Cyberspace Administration of China, the Ministry
of Public Security and the SAMR, have enforced data privacy and protection laws and regulations with varying and evolving standards and
interpretations. In April 2020, the Chinese government promulgated Cybersecurity Review Measures, which came into effect on June 1, 2020.
According to the Cybersecurity Review Measures, operators of critical information infrastructure must pass a cybersecurity review when
purchasing network products and services which do or may affect national security.

In November 2016, the Standing Committee of China’s
National People’s Congress passed China’s first Cybersecurity Law (“CSL”), which became effective in June 2017.
The CSL is the first PRC law that systematically lays out the regulatory requirements on cybersecurity and data protection, subjecting
many previously under-regulated or unregulated activities in cyberspace to government scrutiny. The legal consequences of violation of
the CSL include penalties of warning, confiscation of illegal income, suspension of related business, winding up for rectification, shutting
down the websites, and revocation of business license or relevant permits. In April 2020, the Cyberspace Administration of China and certain
other PRC regulatory authorities promulgated the Cybersecurity Review Measures, which became effective in June 2020. Pursuant to the Cybersecurity
Review Measures, operators of critical information infrastructure must pass a cybersecurity review when purchasing network products and
services which do or may affect national security. On July 10, 2021, the Cyberspace Administration of China issued a revised draft of
the Measures for Cybersecurity Review for public comments (“Draft Measures”), which required that, in addition to “operator
of critical information infrastructure,” any “data processor” carrying out data processing activities that affect or
may affect