Company: LI
Filing Date: 2025-04-10
Form Type: 20-F
Source: 0001410578-25-000678
Chunk: 154

Company: Li Auto Inc.
Filing Date: 2025-04-10
Form: 20-F
Item: Item 4
Chunk 154
---
 certain paid membership and other paid premium services to the owners of the vehicles through our websites and mobile application, which constitute commercial internet information services as defined in the above provisions. Beijing Chelixing Information Technology Co., Ltd. has obtained an ICP License that will remain effective until March 27, 2029.

88

Regulations on Consumer Rights Protection
Our business is subject to a variety of consumer protection laws, including the PRC Consumer Rights and Interests Protection Law, which was amended in 2013 and took effect on March 15, 2014. It imposes stringent requirements and obligations on business operators. Failure to comply with these consumer protection laws could subject us to administrative sanctions, such as the issuance of a warning, confiscation of illegal income, imposition of fines, an order to cease business operations, revocation of business licenses, and potential civil or criminal liabilities. On March 15, 2024, the State Council promulgated the Implementation Rules of the PRC Consumer Rights and Interests Protection Law, which came into effect on July 1, 2024 and refined and enhanced the basic framework of the PRC Consumer Rights and Interests Protection Law.
Regulations on Internet Information Security and Privacy Protection
In November 2016, the Standing Committee of the National People’s Congress, promulgated the PRC Cybersecurity Law, which took effect on June 1, 2017. The Cybersecurity Law requires that network operators, including internet information services providers, take technical measures and other necessary measures in accordance with applicable laws and regulations and the compulsory requirements of the national and industrial standards to safeguard the safe and stable operation of its networks. We are subject to such requirements as we are operating a website and mobile application and providing certain internet services mainly through our mobile application. The Cybersecurity Law further requires internet information services providers to formulate contingency plans for network security incidents, report to the competent departments immediately upon the occurrence of any incident endangering cybersecurity, and take corresponding remedial measures.
Internet information services providers are also required to maintain the integrity, confidentiality, and availability of network data. The Cybersecurity Law reaffirms the basic principles and requirements specified in other existing laws and regulations on personal data protection, such as the requirements on the collection, use, processing, storage, and disclosure of personal data, and internet information services providers being required to take technical and other necessary measures to ensure the security of the personal information they have collected and prevent the personal information from being divulged, damaged, or lost. Any violation of the