Company: KNRX
Filing Date: 2025-09-30
Form Type: 424B4
Source: 0001493152-25-016175
Chunk: 46

Company: KNOREX LTD.
Filing Date: 2025-09-30
Form: 424B4
Chunk 46
---
 would attract potential regulatory actions that may arise which would warrant an enforcement on such breach which could impose administrative remedies, civil penalties, and even criminal charges on our Subsidiary in the event of a violation of the PDPA. These penalties can include fines of up to MYR500,000 and imprisonment of up to three years.

Our business and activities are regulated and subjected to various legal regulations and compliances under the Indian Law.

The Digital Personal Data Protection Act, 2023 (“DPDPA”) was passed by Lok Sabha (lower house of the Indian Parliament) on August 7, 2023, and by the Rajya Sabha (upper house of the Indian Parliament) on August 9, 2023. The DPDPA has also received the President’s assent, and upon being enacted, it will bring in several significant changes to the existing data protection regime. Since 2018, the Indian Government has been in the process of legislating a standalone data protection legislation. The DPDPA, once enacted, will replace the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011.

The DPDPA introduces several compliance requirements for collection and processing of personal data. The DPDPA applies to the processing of digital personal data in India, where the personal data is either (i) collected in digital form; or (ii) collected in a non-digitized format and subsequently digitized. The DPDPA does not apply to the processing of personal data in non-digitized form.

The DPDPA has extra territorial application ,i.e., it applies to the processing of personal data outside India (irrespective of the location of the entity processing) in connection with offering goods or services to data principals located within the territory of India. The provisions of the DPDPA do not apply to (i) personal data processed by an individual for personal or domestic purposes, and (ii) personal data that is made or caused to be made publicly available by (a) the data principal to whom such personal data relates, or (b) any other person who is under a legal obligation to make personal data publicly available.

Earlier this year, on April 11, 2023, the Competition Amendment Act, 2023 (the “Amendment Act”) received the presidential assent to amend the Competition Act, 2002 (the “Act”) and strengthen the existing competition law framework in India. The Amendment Act has introduced changes to the merger control regime, provisions on