Company: ZK
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001410578-25-000390
Chunk: 81

Company: ZEEKR Intelligent Technology Holding Ltd
Filing Date: 2025-03-20
Form: 20-F
Item: Item 3
Chunk 81
---
AC promulgated the Guidelines for Filing the Outbound Data Transfer Security Assessment (Version 2), which provide more clarity on how to apply for the security assessment. In addition, on March 22, 2024, CAC issued the Provisions on Promoting and Standardizing Cross-Border Data Flows, which set forth the circumstances exempted from performing the security assessment or filing procedures for cross-border data transfer and further clarify the thresholds and scenarios for data processors to go through these procedures as stipulated under the aforementioned measures. As of the date of this annual report, we do not transfer any users’ personal information or important data outside of China.
However, as the laws and regulations are still evolving in this regard, we cannot assure you that we will be able to comply with new laws and regulations in all respects, and we may be ordered to rectify, suspend or terminate any actions or services that are deemed illegal by the regulatory authorities and become subject to material penalties, which may materially affect our business, financial condition, results of operations and prospects.

45

These promulgated laws and regulations reflect PRC government’s further attempts to strengthen the legal protection for the national network security, the security of key information infrastructure and the security of personal information protection. These and other similar legal and regulatory developments could lead to legal and economic uncertainty, affect how we design, market and sell solutions, how we operate our business, how our customers process and share data, how we process and use data, and how we transfer personal data from one jurisdiction to another, which could negatively impact demand for our solutions. We may incur substantial costs to comply with such laws and regulations, to meet the demands of our customers relating to their own compliance with applicable laws and regulations, and to establish and maintain internal compliance policies.
Moreover, different regulatory bodies in China, including among others, the MIIT, the CAC and the Ministry of Public Security have enforced laws and regulations regarding cybersecurity, information security, privacy and data protection with various standards and applications.
We have established rigorous and comprehensive policies and other documentation for the collection, processing, sharing, disclosure authorization and other aspects of data use and privacy and taken necessary measures to comply with the applicable laws and regulations regarding cybersecurity, information security, privacy and data protection. However, we cannot guarantee the effectiveness of these policies and measures undertaken by us, our employees, vendors or other business partners. We may be from time to time required to rectify or further improve our measures regarding cybersecurity, information security, privacy and data protection.