Company: AEHL
Filing Date: 2025-08-05
Form Type: 20-F/A
Source: 0001641172-25-022290
Chunk: 27

Company: Antelope Enterprise Holdings Ltd
Filing Date: 2025-08-05
Form: 20-F/A
Chunk 27
---
 further interpretations,
the exact scope of “critical information infrastructure operator” remains unclear. On December 28, 2021, the CAC published
the CAC Revised Measures which further restates and expands the applicable scope of the cybersecurity review. The CAC Revised Measures
took effect on February 15, 2022. Pursuant to the CAC Revised Measures, if a network platform operator holding personal information of
over one million users seeks for “foreign” listing, it must apply for the cybersecurity review. In addition, operators of
critical information infrastructure purchasing network products and services are also obligated to apply for the cybersecurity review
for such purchasing activities. Although the CAC Revised Measures provides no further explanation on the extent of “network platform
operator” and “foreign” listing, as confirmed by our PRC counsel, Sichuan Jindouyun Law Firm, we are not subject to
cybersecurity review with the CAC , because (i) we are not in possession of or otherwise holding personal information of over one million
users and it is also very unlikely that it will reach such threshold in the near future; (ii) as of the date of this annual report, our
data processing activities (including the collection, storage, usage, transmission and publicity of data) do not damage national security;
and (iii) as of the date of this annual report, we have not received any notice or determination from applicable PRC governmental authorities
identifying it as a critical information infrastructure operator. However, we cannot guarantee that we will not be subject to cybersecurity
review in the future. During such review, we may be required to suspend our operation experience other disruptions to our operations.
Cybersecurity review could also result in negative publicity with respect to our company and diversion of our managerial and financial
resources.

Furthermore, if we were found
to be in violation of applicable laws and regulations in China during such review, we could be subject to administrative penalties, such
as warnings, fines, or service suspension. Therefore, cybersecurity review could materially and adversely affect our business, financial
condition, and results of operations.

In addition, the PRC Data Security
Law, promulgated by the Standing Committee of the National People’s Congress on June 10, 2021 and took effect on September 1, 2021,
requires data collection to be conducted in a legitimate and proper manner, and stipulates that, for the purpose of data protection, data
processing activities must be conducted based on data classification and