Company: ZHIHF
Filing Date: 2025-04-15
Form Type: 20-F
Source: 0001410578-25-000729
Chunk: 281

Company: Zhihu Inc.
Filing Date: 2025-04-15
Form: 20-F
Item: Item 4
Chunk 281
---
 Internet Information Services, which were promulgated by the MIIT on December 29, 2011 and became effective on March 15, 2012, stipulate that internet content provision operators must not collect user personal information without user consent. User personal information is defined as user information that can be used alone or in combination with other information to identify the user, and may not provide any such information to third parties without prior user consent. Internet content provision operators may only collect user personal information necessary to provide their services and must expressly inform the users of the method, content and purpose of the collection and processing of such user personal information. In addition, an internet content provision operator may only use such user personal information for the stated purposes under the internet content provision operator’s scope of service. Internet content provision operators are also required to ensure the proper security of user personal information and take immediate remedial measures if user personal information is suspected to have been disclosed. If the consequences of any such disclosure are expected to be serious, ICP operators must immediately report the incident to the telecommunications regulatory authority and cooperate with the authorities in their investigations.
On December 28, 2012, the Standing Committee of the National People’s Congress promulgated the Decision of the Standing Committee of the National People’s Congress on Strengthening Online Information Protection with immediate effect. The decision provides that, among others, internet service providers shall abide by the principles of legality, legitimacy and necessity, clearly state the purpose, method and scope of the collection and use of information, obtain the consent of the person whose information is being collected when collecting and using a citizen’s personal information during business activities, and shall not violate the provisions of laws and regulations or the agreement between the parties when collecting and using information.

82

On July 16, 2013, the MIIT issued the Order for the Protection of Telecommunication and Internet User Personal Information, which came into effect on September 1, 2013. The majority of the requirements under the order relevant to internet content provision operators are consistent with pre-existing requirements, but they are often more stringent and expansive in scope. If an internet content provision operator wishes to collect or use personal information, it may do so only if such collection is necessary for the services it provides. Furthermore, it must disclose to its users the purpose, method and scope of any such collection or use, and must obtain consent from its users whose information is being collected or used. Internet content provision operators are also required to establish and publish their rules relating to personal information