Company: PAVS
Filing Date: 2025-08-04
Form Type: 20-F
Source: 0001929980-25-000590
Chunk: 18

Company: Paranovus Entertainment Technology Ltd.
Filing Date: 2025-08-04
Form: 20-F
Item: Item 3
Chunk 18
---
 apply not only to third-party transactions, but also to transfers of information between us and our subsidiaries, and among us, our subsidiaries, and other parties with which we have commercial relations. These laws continue to develop, and the PRC government may adopt other rules and restrictions in the future. Non-compliance could result in penalties or other significant legal liabilities.

Pursuant to the PRC Cybersecurity Law, which was promulgated by the Standing Committee of the National People’s Congress on November 7, 2016 and took effect on June 1, 2017, personal information and important data collected and generated by a critical information infrastructure operator in the course of its operations in China must be stored in China, and if a critical information infrastructure operator purchases internet products and services that affects or may affect national security, it should be subject to cybersecurity review by the CAC. Due to the lack of further interpretations, the exact scope of “critical information infrastructure operator” remains unclear. On December 28, 2021, the CAC and other relevant PRC governmental authorities jointly promulgated the Cybersecurity Review Measures (the “new Cybersecurity Review Measures”) to replace the original Cybersecurity Review Measures. The new Cybersecurity Review Measures took effect on February 15, 2022. Pursuant to the new Cybersecurity Review Measures, if critical information infrastructure operators purchase network products and services, or network platform operators conduct data processing activities that affect or may affect national security, they will be subject to cybersecurity review. A network platform operator holding more than one million users/users’ individual information also shall be subject to cybersecurity review before listing abroad. The cybersecurity review will evaluate, among others, the risk of critical information infrastructure, core data, important data, or a large amount of personal information being influenced, controlled or maliciously used by foreign governments and network information security risk in connection with the overseas listing. As of today, we have not received any inquiry, notice, warning, or sanctions regarding our corporate structure from the CSRC, CAC or any other PRC governmental agency. As of today, we have not received any inquiry, notice, warning, or sanctions regarding our corporate structure from the CSRC, CAC or any other PRC governmental agency. As advised by our PRC counsel, Jingtian & Gongcheng LLP, we are unlikely to be subject to cybersecurity review, because: (i) we have not received any notice from governmental agency to treat us as an operator of critical information infrastructure, and (ii) we have