Company: NTCL
Filing Date: 2025-02-18
Form Type: 20-F
Source: 0001410578-25-000153
Chunk: 61

Company: NetClass Technology Inc
Filing Date: 2025-02-18
Form: 20-F
Item: Item 5
Chunk 61
---
 or in combination with other information to identify the users, including but not limited to the name, birth date, ID No., address, telephone number and account number and the information about when and where the user uses such telecommunication and internet service. On November 7, 2016, the SCNPC promulgated the PRC Cyber Security Law, which took effect on June 1, 2017. Pursuant to the Cyber Security Law, any individual or organization using the network must comply with the constitution and the applicable laws, follow the public order and respect social moralities; and must not endanger cyber security, or engage in activities by making use of the network that endanger the national security, honor and interests, or infringe on the fame, privacy, intellectual property and other legitimate rights and interests of others. The Cyber Security Law sets forth various security protection obligations for network operators, which are defined as “owners and administrators of networks and network service providers”, including, among others, complying with a series of requirements of tiered cyber protection systems; verifying users’ real identity; localizing the personal information and important data gathered and produced by critical information infrastructure operators during operations within the PRC; and providing assistance and support to government authorities where necessary for protecting national security and investigating crimes. However, the effect of these laws on curbing hacking and other illegal online activities still remains to be seen. Significant capital, managerial and human resources are required to comply with legal requirements, enhance information security and to address any issues caused by security failures. If we are unable to protect our systems, hence the information stored in our systems, from unauthorized access, use, disclosure, disruption, modification or destruction, such problems or security breaches could cause loss or give rise to our liabilities to the owners of confidential information, such as our course participants; subject us to penalties imposed by administrative authorities; and disrupt our operations. In addition, complying with various laws and regulations could cause us to incur substantial costs or require us to change our business practices, including our data practices, in a manner adverse to our business.

Table of Contents

Furthermore, course participants and others may have concerns about whether our products, services or processes could compromise the privacy of users and others. Concerns about our practices with regard to the collection, use, disclosure, or security of personal information or other privacy related matters, and any negative publicity on our information safety or privacy protection mechanism and policy, even if unfounded, could damage our reputation and brand and adversely affect our business and results of operations.

Concern