Company: NBRG
Filing Date: 2025-07-28
Form Type: DRS/A
Source: 0001213900-25-068218
Chunk: 126

Company: Newbridge Acquisition Ltd
Filing Date: 2025-07-28
Form: DRS/A
Chunk 126
---
 the Cyberspace Administration of China or CAC published the Circular on Seeking Comments on Cybersecurity Review Measures (Revised Draft for Comments) (the “Review Measures Draft”), which provides that, in addition to critical information infrastructure operators (“CIIOs”) that intend to purchase Internet products and services, data processing operators engaging in data processing activities that affect or may affect national security must be subject to cybersecurity review by the Cybersecurity Review Office of the PRC. According to the Review Measures Draft, a cybersecurity review assesses potential national security risks that may be brought about by any procurement, data processing, or overseas listing. The Review Measures Draft further requires that CIIOs and data processing operators that possess personal data of at least one million users must apply for a review by the Cybersecurity Review Office of the PRC before conducting listings in foreign countries. On December 28, 2021, CAC published the Measures for Cybersecurity Review (“CRM”), which further restates and expands the applicable scope of the cybersecurity review. The revised CRM became effective on February 15, 2022. Pursuant to the revised CRM, if a network platform operator holding personal information of over one million users seeks for foreign listing, it must apply for the cybersecurity review, and operators of critical information infrastructure purchasing network products and services are also obligated to apply for the cybersecurity review for such purchasing activities. In addition, the revised CRM empowers the cybersecurity review office to initiate cybersecurity review when they believe any particular data processing activities affect or may affect national security. Compliance or failure to comply with such laws could increase the costs of our products and services, could limit their use or adoption, and could otherwise negatively affect our operating results and business. As these regulations were newly issued and the governmental authorities may further enact detailed rules or guidance with respect to the interpretation and implementation of such regulations, it remains unclear whether we will be identified as a CIIO. Our business is subject to complex and evolving Chinese and international laws and regulations, including those regarding data privacy and cybersecurity. Many of these laws and regulations are subject to change and uncertain interpretation. Failure to comply with existing or future laws and regulations related to cybersecurity, information security, privacy and data protection could lead to government enforcement actions, which could include civil or criminal fines or penalties, investigation or sanction by regulatory authorities, private litigation, other liabilities, and/or adverse publicity. Compliance or failure to comply with such laws could increase the costs of our products and services, could limit their use or adoption, and could otherwise negatively affect our operating results and