Company: JXG
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001213900-25-043744
Chunk: 42

Company: JX Luxventure Group Inc.
Filing Date: 2025-05-15
Form: 20-F
Item: Item 3
Chunk 42
---
7, 2022, the CAC promulgated the Security Assessment
Measures for Cross-border Data Transfers with effect from September 1, 2022. These measures require the data processor providing data
overseas and falling under any of the following circumstances apply for the security assessment of cross-border data transfer by the national
cybersecurity authority through its local counterpart: (i) where the data processor intends to provide important data overseas; (ii) where
the critical information infrastructure operator and any data processor who has processed personal information of more than 1,000,000
people intend to provide personal information overseas; (iii) where any data processor who has provided personal information of 100,000
people or sensitive personal information of 10,000 people to overseas recipients accumulatively since January 1 of the last year intends
to provide personal information overseas; and (iv) other circumstances where the security assessment of data cross-border transfer is
required as prescribed by the CAC.

Given that the above mentioned newly promulgated
laws, regulations and policies were recently promulgated or issued, or have not yet been formally promulgated or taken effect (as applicable),
their enactment, interpretation, application and enforcement are subject to substantial uncertainties. As the definitions for terms such
as network platform operator and national security are broad, and the government will likely retain significant discretion as to the interpretation
and enforcement of the Cybersecurity Review Measures and any implementation rules, we may be subject to related rules. We cannot preclude
the possibility that the Cybersecurity Review Measures will subject us to the cybersecurity review by the CAC in relation to our operations
or require us to adjust our business practices, in which case our business, financial condition and prospects may be materially and negatively
affected. We have incurred, and will continue to incur, significant expenses in an effort to comply with cybersecurity, privacy, data
protection and information security related laws, regulations, standards and protocols, especially as a result of such newly promulgated
laws and regulations. As of the date of this Annual Report, we have not been involved in any investigations, nor have we received any
inquiry, notice, warning, or sanction by the CAC or related PRC governmental authorities as a result of violation of any currently effective
PRC laws or regulations with respect to personal information or data requirements issued by the CAC up to date. However, as uncertainties
remain regarding the interpretation and implementation of these laws and regulations, despite