Company: CHNR
Filing Date: 2025-01-27
Form Type: POS AM
Source: 0001079973-25-000143
Chunk: 47

Company: CHINA NATURAL RESOURCES INC
Filing Date: 2025-01-27
Form: POS AM
Chunk 47
---
 cybersecurity review to the applicable
local cyberspace administration in accordance with the provisions thereunder.

| 23 |

On July 30, 2021, the State Council promulgated
the Regulations on Security Protection of Critical Information Infrastructure, which became effective on September 1, 2021. Pursuant
to the Regulations on Security Protection of Critical Information Infrastructure, critical information infrastructure shall mean any
important network facilities or information systems of an important industry or field, such as public communications and information
services, energy, transportation, water conservation, finance, public services, e-government affairs and science and technology and national
defense industries, which may seriously endanger national security, peoples’ livelihoods and the public interest in the event of
damage, function loss or data leakage. In addition, the relevant administrative departments of each critical industry and sector shall
be responsible for formulating eligibility criteria and determining the critical information infrastructure operator in the respective
industry or sector. The operators shall be informed about the final determination as to whether they are categorized as critical information
infrastructure operators. Among these industries, the energy and telecommunications industries are mandated to take measures to provide
key assurances for the safe operation of critical information infrastructure in other industries and fields.

We and our PRC subsidiaries do not carry
out business in China through any self-owned network platform and hold personal information of less than one million individuals from
PRC operations. We and our PRC subsidiaries have not been identified as critical information infrastructure operators by any PRC authorities.
The data collected from our China operations is mainly information related to our production, customers, suppliers and our employees.
We believe that we and our PRC subsidiaries do not commit any acts that threaten or endanger the national security of the PRC, and to
our knowledge we and our PRC subsidiaries have not received or been subject to any investigation, notice, warning or sanction from any
PRC authority with respect to national security issues arising from our business operations. As of the date of this prospectus, we do
not believe that we need to proactively apply for the cybersecurity review required by the CAC.

Furthermore, the CAC promulgated the
Security Assessment Measures for Outbound Data Transfers, which became effective on September 1, 2022, which require that to provide
data abroad under any of the following circumstances, a data processor shall declare security assessment for its outbound data transfer
to the CAC through the local cyberspace administration at the provincial level: (i) where a data