Company: GDHLF
Filing Date: 2025-05-27
Form Type: 424B5
Source: 0001104659-25-053057
Chunk: 58

Company: GDS Holdings Ltd
Filing Date: 2025-05-27
Form: 424B5
Chunk 58
---
 customers’ data stored on the servers collocated in our data centers, we cannot rule out the possibility that data related to our operations may be deemed important data/core data or we may be deemed to be a critical information infrastructure operator, which would subject us to additional supervisory requirements. Any incompliance on such additional supervisory requirements may subject us to fines, order to rectify, suspension of users registration, revocation of business certificate and other penalties, which may have material adverse effect on our business, operations and financial condition as well as the price of our securities.

In addition, we could become subject to enhanced cybersecurity review or investigations launched by PRC regulators in the future. The Data Security Law provides that the state shall establish a data security review mechanism on data processing activities that do or may affect national security. Pursuant to the Cybersecurity Review Measures effective on February 15, 2022, critical information infrastructure operators that procure internet products and services must be subject to the cybersecurity review if their activities affect or may affect national security and network platform operators that hold personal information of over one million users shall apply with the Cybersecurity Review Office for a cybersecurity review before any public listing in a foreign country. For more details, please see “Item 4. Information on the Company — B. Business Overview — Regulatory Matters Related to Our Business — People’s Republic of China Regulations — Regulations Related to Information Security and Confidentiality of User Information” in our 2024 Annual Report. Any failure or delay in the completion of the cybersecurity review procedures or any other non-compliance with the cybersecurity related laws and regulations may result in fines or other penalties, including suspension of business, website closure, and revocation of prerequisite licenses, as well as reputational damage or legal proceedings or actions against us, which may have material adverse effect on our business, financial condition or results of operations. As of the date of this prospectus supplement, we have not been informed by any PRC governmental authority of any requirement that we file for a cybersecurity review. We have not been involved in any investigations on cybersecurity review initiated by the CAC or other competent authorities, and we have not received any inquiry, notice, warning, or sanction in such respect. However, there remains significant uncertainty in the interpretation and enforcement of relevant PRC cybersecurity laws and regulations. We cannot assure you that our future offering will be subject to cybersecurity review by the CAC or other competent authorities, and if so, we may not be able to pass such review.

We believe that we are in compliance with the regulations