Company: VSA
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001410578-25-001300
Chunk: 139

Company: VisionSys AI Inc
Filing Date: 2025-05-15
Form: 20-F
Item: Item 4
Chunk 139
---
ated by the State Council on September 24, 2024, and became effective as of January 1, 2025. The Network Data Regulations restates and further specifies the legal requirements for personal information, important data, cross-border data transfer, network platform services, and data security. Among others, network data handlers engaging in data processing activities that affect or may affect national security must be subject to network data security review by the relevant cyberspace administration of the PRC. Any failure to comply with such requirements may subject us to, among others, suspension of services, fines, revoking relevant business permits or business licenses and penalties.
On January 4, 2022, the Cyberspace Administration of China published the Revised Cybersecurity Review Measures, which became effective on February 15, 2022. The Revised Cybersecurity Review Measures provides that a critical information infrastructure operator purchasing network products and services, and network platform operators engaging in data processing activities that affect or may affect national security, shall apply for cybersecurity review and that network platform operators possessing personal information of over one million users shall apply with the Cybersecurity Review Office for a cybersecurity review before any public offering at a foreign stock exchange.
On January 4, 2022, the Cyberspace Administration of China published the Administrative Provisions on Internet Information Service Algorithm Recommendation on its website, which became effective on March 1, 2022 and raises certain new compliance requirements on internet information service providers using algorithm recommendation technology. Specifically, the provisions require that such service providers shall provide users with options that are not specific to their personal characteristics, or provide users with convenient options to cancel algorithmic recommendation services.
On June 27, 2022, the Cyberspace Administration of China published the Administrative Provisions for Internet User Account Name Information, effective on August 1, 2022, which provides that an online user account service platform shall require users to provide real identity information when users apply to register an account on the platform and adopt certain measures to verify users’ identification.

79

On July 7, 2022, the Cyberspace Administration of China issued the Measures on Security Assessment of the Cross-border Transfer of Data, with effective from September 1, 2022. The measures provides that four types of cross-border transfers of critical data or personal data generated from or collected in mainland China should be subject to a security assessment, which includes: (i) a data processor to transfer important data overseas; (ii) either a critical information infrastructure operator, or a data