Company: SOS
Filing Date: 2025-06-25
Form Type: F-3/A
Source: 0001213900-25-057886
Chunk: 49

Company: SOS Ltd
Filing Date: 2025-06-25
Form: F-3/A
Chunk 49
---
 offerings, we may be unable to obtain a waiver of such approval requirements,
if and when procedures are established to obtain such a waiver. Any uncertainties or negative publicity regarding such approval requirement
could materially and adversely affect our business, prospects, financial condition, reputation, and the trading price of our listed securities.

Failure to comply with governmental regulations and other legal obligations concerning data protection and cybersecurity may materially and adversely affect our business.

We and the VIEs are subject
to PRC laws and regulations governing the collecting, storing, sharing, using, processing, disclosure and protection of data on the internet
and mobile platforms as well as cybersecurity. The PRC regulators, including the MIIT and the CAC, have been increasingly focused on regulation
in the areas of cybersecurity and data protection and governmental authorities have enacted a series of laws and regulations to enhance
the protection of privacy and data, which require certain authorization or consent from users prior to collection, use or disclosure of
their personal data and also protection of the security of the personal data of such users. The MIIT issued the Order for the Protection
of Telecommunications and Internet User Personal Information on July 16, 2013, requiring internet service providers to establish and publish
protocols relating to the collection or use of personal information, keep any collected information strictly confidential and take technological
and other measures to maintain the security of such information. Institutions and their employees are prohibited from selling or otherwise
illegally disclosing a person’s personal information obtained during the course of performing duties or providing services. Pursuant
to the PRC Cybersecurity Law, effective on June 1, 2017, network operators are required to fulfill certain obligations to safeguard cyber
security and enhance network information management. See “Item 4. Information on the Company — B. Business Overview —
Regulations — Regulations relating to internet information security and privacy protection” of the 2023 Form 20-F.

Moreover, existing PRC privacy, cybersecurity
and data protection-related laws and regulations are evolving and subject to potentially differing interpretations, and various legislative
and regulatory bodies may expand current or enact new laws and regulations regarding privacy, cybersecurity and data protection-related
matters. These developments could adversely affect our and the VIEs’ business, operating results and financial condition. Any failure
or perceived failure by us or the VIEs to comply with new or existing PRC privacy, cybersecurity or data protection laws, regulations,
policies, industry standards or legal obligations, or any systems failure or security incident that