Company: CNTB
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001835268-25-000014
Chunk: 201

Company: Connect Biopharma Holdings Ltd
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 201
---
 network is free from interference, disruption or unauthorized access, and prevent network data from being disclosed, stolen or tampered. 

In 2022, the Cyberspace Administration of China or the CAC took action against several PRC internet companies in connection with their initial public offerings on U.S. securities exchanges, for alleged national security risks and improper collection and use of the personal information of PRC data subjects. In April 2020, the Chinese government promulgated the Cybersecurity Review Measures or the “2020 Cybersecurity Review Measures”, which came into effect on June 1, 2020. In July 2021, the CAC and other related authorities released a draft amendment to the 2020 Cybersecurity Review Measures for public comments. On December 28, 2021, the Chinese government promulgated amended Cybersecurity Review Measures (the “2022 Cybersecurity Review Measures”) which came into effect and replaced the 2020 Cybersecurity Review Measures on February 15, 2022. 

According to the 2022 Cybersecurity Review Measures, (i) critical information infrastructure operators (“CIIOs”) that purchase network products and services and internet platform operators that conduct data processing activities are subject to cybersecurity review in accordance with the 2022 Cybersecurity Review Measures if such activities affect or may affect national security; and (ii) internet platform operators holding personal information of more than one million users and seeking to have their securities list on a stock exchange in a foreign country shall file for cybersecurity review with the Cybersecurity Review Office. The 2022 Cybersecurity Review Measures remain unclear on whether the relevant requirements will be applicable to the follow-on offerings of companies that have completed initial public offerings on stock exchanges outside the PRC. As of the date of this Annual Report on Form 10-K, we have not been informed by any PRC government agency that we qualify as a CIIO or internet platform operator, and we are not a data processor in possession of more than one million users’ personal information. Further, we have not been involved in any cybersecurity-related investigation initiated by the CAC or any other PRC government authority, and have not received any cybersecurity-related warning or sanction from the PRC government authorities, or any notice from relevant authorities requesting that we file for the cybersecurity review. Therefore, based on our understanding of the current PRC laws and regulations, we are of the view that we are unlikely to be subject to such cybersecurity review arising from our continued listing on a U.S. stock exchange or offerings of