Company: LI
Filing Date: 2025-04-10
Form Type: 20-F
Source: 0001410578-25-000678
Chunk: 156

Company: Li Auto Inc.
Filing Date: 2025-04-10
Form: 20-F
Item: Item 4
Chunk 156
---
 any collection and use of a user’s personal information must be consensual, legal, reasonable, and necessary, and must be limited to specified purposes, methods, and scopes. An internet information service provider must also keep such information strictly confidential, and is further prohibited from divulging, tampering with, or destroying any such information, or selling or providing such information to other parties. An internet information service provider is required to take technical and other measures to prevent the collected personal information from any unauthorized disclosure, damage, or loss. In case of any actual or potential leakage of user personal information, internet information service providers must take immediate remedial measures and make timely report to the regulatory authorities and inform users in accordance with the regulations. Any violation of these laws and regulations may subject the internet information service provider to warnings, fines, confiscation of illegal gains, revocation of licenses, cancelation of filings, shutdown of websites, or even criminal liabilities.
Pursuant to the Notice of the Supreme People’s Court, the Supreme People’s Procuratorate, and the Ministry of Public Security on Lawfully Punishing Criminal Activities Infringing upon the Personal Information of Citizens issued in 2013 and the Interpretation of the Supreme People’s Court and the Supreme People’s Procuratorate on Several Issues Regarding Legal Application in Criminal Cases Infringing upon the Personal Information of Citizens issued on May 8, 2017 and effective on June 1, 2017, the following activities may constitute the crime of infringing upon a citizen’s personal information: (i) providing a citizen’s personal information to specified persons or releasing a citizen’s personal information online or through other methods in violation of applicable regulations and rules; (ii) providing legitimately collected information relating to a citizen to others without such citizen’s consent (unless the information is processed, not traceable to a specific person, and not recoverable); (iii) collecting a citizen’s personal information in violation of applicable regulations and rules when performing a duty or providing services; or (iv) collecting a citizen’s personal information by purchasing, accepting, or exchanging such information in violation of applicable regulations and rules.
With respect to the security of information collected and used by mobile apps, pursuant to the Announcement of Conducting Special Supervision Against the Illegal Collection and Use of Personal Information by Apps issued on January 23, 2019, app operators should collect and use personal information in compliance with the Cybersecurity Law and should be responsible for the security of personal information obtained from users and take effective measures to strengthen