Company: EZOO
Filing Date: 2025-05-15
Form Type: 10-K
Source: 0001641172-25-010460
Chunk: 481

Company: Ezagoo Ltd
Filing Date: 2025-05-15
Form: 10-K
Item: Item 1
Chunk 481
---
 more than one million users must apply for a cybersecurity
review if it intends to list its securities on a foreign stock exchange. The operators of critical information infrastructure purchasing
network products and services, and the online platform operators (together with the operators of critical information infrastructure,
the “Operators”) carrying out data processing activities that affect or may affect national security, shall conduct a cybersecurity
review, and any online platform operator who controls more than one million users’ personal information must go through a cybersecurity
review by the cybersecurity review office if it seeks to be listed in a foreign country. Pursuant to the Measures, we don’t believe
we will be subject to the cybersecurity review by the CAC, given that (i) we possess personal information of a relatively small number
of users (approximately 10,840 users) in our business operations as of the date of this report, significantly less than the one million
user threshold set for a data processing operator applying for listing on a foreign exchange that is required to pass such cybersecurity
review; and (ii) data processed in our business does not have a bearing on national security and thus shall not be classified as core
or important data by the authorities. We don’t believe that we are an Operator within the meaning of the Measures, nor do we control
more than one million users’ personal information, and as such, we should not be required to apply for a cybersecurity review under
the Measures.

However,
in view of the fact that the Measures was released recently and there is a general lack of guidance and substantial uncertainties exist
with respect to their interpretation and implementation. For example, there is still no clear definition of “online platform operator”.
Whether the data processing activities carried out by traditional enterprises (such as food, medicine, automobile and other production
enterprises) are subject to such review and the scope of the review remain to be further clarified by the regulatory authorities in the
subsequent implementation process.

Furthermore,
the CAC released the draft of the Regulations on Network Data Security Management (Draft for Comment) in November 2021 for public consultation,
which among other things, stipulates that a data processor listed overseas must conduct an annual data security review by itself or by
engaging a data security service provider and submit the annual data security review report for a given year to the municipal cybersecurity
department before January 31 of the following year. If the draft Regulations on Network Data Security Management are enacted in the current
form, we, as an overseas listed company, will be required