Company: SSEA
Filing Date: 2025-04-11
Form Type: DRS/A
Source: 0001829126-25-002569
Chunk: 134

Company: STARRY SEA ACQUISITION CORP
Filing Date: 2025-04-11
Form: DRS/A
Chunk 134
---
 accordance with relevant laws and regulations. Additionally, the Network Data Security Regulations emphasize the obligations of important data processors, and clarify the definition and obligations of “large-scale network platform” service providers, with the “large-scale network platform” referring to a network platform with more than 50 million registered users or more than 10 million monthly active users, complex business types, and network data processing activities having a significant impact on national security, economic operation, national welfare and people’s livelihood, etc.

On December 28, 2021, the CAC, MIIT and other eleven regulatory authorities jointly issued the Revised Cybersecurity Review Measures, which became effective on February 15, 2022 and repealed the Cybersecurity Review Measures promulgated on April 13, 2020. The Revised Cybersecurity Review Measures provide that a critical information infrastructure operator purchasing network products and services, and network platform operators engaging in data processing activities that affect or may affect national security, which affect or may affect national security, shall apply for cybersecurity review and that network platform operators that hold personal information of over one million users shall apply with the Cybersecurity Review Office for a cybersecurity review before listing abroad. The relevant government authorities may initiate the cybersecurity review against the relevant operators if the authorities believe that the network products or services or data processing activities of such operators affect or may affect national security.

On July 7, 2022, the CAC promulgated the Security Assessment Measures for Outbound Data Transfer, effective from September 1, 2022, to regulate outbound data transfer activities, protect the rights and interests of personal information, safeguard national security and social public interests, and promote the cross-border security and free flow of data.

<div align='center'>80</div>

As we do not have any specific business combination under consideration and we have not (nor has anyone on our behalf), directly or indirectly, contacted any prospective target business or had any substantive discussions, formal or otherwise, with respect to such a transaction, our initial business combination target company may include a PRC target company. It is uncertain whether such PRC target company will be involved in the collection of user data, implicate cybersecurity, or involve any other type of restricted industry. Given the PRC authorities have significant discretion in interpreting and applying the relevant cybersecurity and data laws and regulations, there is a risk that any potential target business of ours may be subject to cybersecurity review or other regulatory actions even though it is not based or located in and does not conduct its principal business operations in China. To avoid