Company: NOAH
Filing Date: 2025-04-24
Form Type: 20-F
Source: 0001410578-25-000852
Chunk: 136

Company: NOAH HOLDINGS LTD
Filing Date: 2025-04-24
Form: 20-F
Item: Item 4
Chunk 136
---
 inform the users of the method, content and purpose of the collection and processing of such user’s personal information and may only collect such information necessary for the provision of its services. An ICP service operator is also required to properly keep the user personal information, and in the case of any leak or potential leak of the user’s personal information, the ICP service operator must take immediate remedial measures and, in severe circumstances, to make an immediate report to the telecommunications regulatory authority. In addition, pursuant to the Decision on Strengthening the Protection of Online Information issued by the Standing Committee of the National People’s Congress on December 28, 2012 and the Order for the Protection of Telecommunication and Internet User’s Personal Information issued by the MIIT in July 2013, any collection and use of user’s personal information must be subject to the consent of the users, abide by the principles of legality, rationality and necessity and be within the specified purposes, methods and scopes. An ICP service operator must also keep such information strictly confidential, and is further prohibited from divulging, tampering or destroying any such information, or selling or providing such information to other parties. Any violation of the above decision or order may subject the ICP service operator to warnings, fines, confiscation of illegal gains, revocation of licenses, cancelation of filings, closedown of websites or even criminal liabilities.
Furthermore, in June 2016, the CAC issued the Administrative Provisions on Mobile Internet Applications Information Services, which became effective on August 1, 2016, and was further amended and took effect on August 1, 2022, to further strengthen the regulation of the mobile application information services. Pursuant to these provisions, owners or operators of mobile Internet applications that provide information services are required to be responsible for information security management, establish and improve the protective mechanism for user information, observe the principles of legality, rightfulness, necessity and integrity, and expressly state the purpose, method and scope of, and obtain user consent to, the collection and use of users’ personal information. In addition, the new Cyber Security Law also requires network operators to strictly keep users’ personal information that they have collected confidential and to establish and improve their user information protective mechanisms. 
On November 28, 2019, the Secretary Bureau of the Cyberspace Administration of China, the General Office of the MIIT, the General Office of the Ministry of Public Security and the General Office of the State Administration for Market Regulation promulgated the Identification