Company: GDHLF
Filing Date: 2025-04-28
Form Type: 20-F
Source: 0001410578-25-000935
Chunk: 229

Company: GDS Holdings Ltd
Filing Date: 2025-04-28
Form: 20-F
Item: Item 4
Chunk 229
---
5, the Infocomm Media Development Authority (“IMDA”) issued a set of advisory guidelines on the resilience and security of data centers which encourage data center operators to establish objectives, policies, procedures and processes to achieve business continuity targets, implement and operate business continuity management system, monitor and measure business continuity management system’ performance and conformance, and take corrective and preventive actions to improve business continuity management system performance. Whilst the advisory guidelines are voluntary, it is expected that some of the recommendations will be codified in a Digital Infrastructure Act that Singapore is looking to introduce to systematically regulate important digital infrastructure such as major cloud service providers and data center operators.

Malaysia Regulations

The following is a summary of the material laws and regulations or requirements that affect DayOne’s business activities in Malaysia or our rights as its shareholders to receive dividends and other distributions from DayOne.

Regulations on Telecommunications Business

The Communications and Multimedia Act 1998, or CMA, together with theCommunications and Multimedia (Licensing) Regulations 2000, or CMA Licensing Regulations, are the primary legislative instruments that regulate the licensing regime of the communications and multimedia industry in Malaysia, which is under the regulatory purview of the Malaysian Communications and Multimedia Commission, or MCMC.

MCMC had issued the Advisory Notice on Cloud Service, followed by the Information Paper on Regulating Cloud Services, both of which came into force on 1 April 2022, to provide that the licensing requirement under the Applications Service Providers Class, or ASP (C), license will be applicable to the provision of cloud services to end users in Malaysia under certain circumstances in the form of Infrastructure-as-a-Service (IaaS) or Platform-as-a-Service (PaaS). Where there is provision of any form of connectivity services other than cloud services, a Network Facilities Provider Individual (NFP(I)) and/or Network Service Provider Individual (NSP(I)) license will be required as well.

As a holder of an ASP(C) licence (to the extent that the service provided utilizes internet access to enable communication between users) or a NSP (I) licence under the CMA, there are additional obligations under Online Safety Bill 2024, or OSB in relation to the regulation of harmful content on our services. The OSB was passed by the Malaysian Parliament on December 16, 2024 and is currently awaiting royal assent and publication in the Federal Gazette before it becomes law. It will come into operation on a date to be appointed by the Malaysian Government.

Regulations on Foreign