Company: ILLRW
Filing Date: 2025-01-24
Form Type: S-1
Source: 0001213900-25-006210
Chunk: 130

Company: Triller Group Inc.
Filing Date: 2025-01-24
Form: S-1
Chunk 130
---

the EU GDPR, parties are either controllers, which are decision-makers that exercise overall control over the purposes and means of data
processing, whether alone or jointly with one or more other persons, or processors, who act on behalf of, and only on the instructions
of, the relevant controller. In the provision of Triller’s services to its users, Triller generally acts as a controller, which
imposes significant compliance obligations on Triller under the EU GDPR. If Triller fails to satisfy these obligations, it may be subject
to investigation or administrative fines from supervisory authorities or subject to individual claims that Triller failed to comply with
the applicable provisions of EU GDPR. In addition, further to the United Kingdom’s exit from the European Union on January 31, 2020,
the EU GDPR ceased to apply in the United Kingdom at the end of the transition period on December 31, 2020. In addition, Triller is also
subject to data protection laws in the United Kingdom. The UK GDPR and the UK Data Protection Act 2018 set out the United Kingdom’s
data protection regime, which is independent from but aligned to the European Union’s data protection regime. Non-compliance with
the EU GDPR, or UK GDPR, may result in monetary penalties of up to €20 million (or £17.5 million under UK GDPR) or 4% of worldwide
annual turnover, whichever is higher. Further, a wide variety of other potential enforcement powers are available to competent supervisory
authorities in respect of potential and suspected violations of the EU GDPR, or UK GDPR, including audit and inspection rights, and powers
to order temporary or permanent bans on all or some processing activities. The EU GDPR and UK GDPR also confer a private right of action
on data subjects and consumer associations to lodge complaints with supervisory authorities, seek judicial remedies, and obtain compensation
for damages resulting from violations of the EU GDPR and UK GDPR.

The EU GDPR also provides
that European Economic Area (“EEA”) Member States may make their own further laws and regulations to introduce additional
requirements (for example, related to the processing of “special categories of personal data,” as well as personal data related
to criminal offenses or convictions) which adds to the complexity of processing personal data in or from the EEA or the United Kingdom.
This may lead to greater divergence in the law that applies to the processing of personal data across the EEA and/or United Kingdom, compliance
with which could limit Triller’s ability