Company: CHNR
Filing Date: 2025-01-27
Form Type: POS AM
Source: 0001079973-25-000143
Chunk: 137

Company: CHINA NATURAL RESOURCES INC
Filing Date: 2025-01-27
Form: POS AM
Chunk 137
---
 the date of this prospectus, the Company has not received any notification from any PRC governmental authority that it is operating any “critical information infrastructure.”

| 80 |

On August 20, 2021, the SCNPC promulgated the Personal Information Protection Law, effective on November 1, 2021. The Personal Information Protection Law requires, among others, that (i) the processing of personal information should have a clear and reasonable purpose which should be directly related to the purpose of the processing activity, in a method that has the least impact on personal rights and interests, and (ii) the collection of personal information should be limited to the minimum scope necessary to achieve the purpose of the processing activity to avoid the excessive collection of personal information. Different types of personal information and personal information processing will be subject to different rules on consent requirement, transfer, and security. Entities that process personal information shall bear responsibilities for the activities they conduct relating to such personal information, and shall adopt necessary measures to safeguard the security of the personal information that they process. Otherwise, such entities could be ordered to correct, suspend or terminate the provision of their services, and face confiscation of illegal income, fines or other penalties.

On November 14, 2021, the CAC published a discussion draft of the Regulations for the Administration of Network Data Security (the “Draft Data Security Regulations”), which provides that the undertaking of the following activities shall be subject to a cybersecurity review: (i) the merger, reorganization or separation of network platform operators that have gathered and mastered a large number of data resources related to national security, economic development or public interests affects, which may affect national security; (ii) overseas listing of data processors processing the personal information of over one million users; (iii) the listing in Hong Kong of data processors processing conducting data processing activities which affect or may affect national security; (iv) other data processing activities that affect or may affect national security. The Draft Data Security Regulations also provides that operators of large internet platforms that set up headquarters, operation centers or research and development centers overseas shall report to the national cyberspace administration and other competent authorities. The Draft Data Security Regulations also states that data processors processing important data or listing overseas shall conduct an annual data security assessment by themselves or by engaging a data security service institution, and shall submit the assessment report of the previous year to the relevant CAC municipal office before January 31 of each year. In addition, the Draft Data Security Regulations also requires network platform operators to enact platform rules,