Company: VSA
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001410578-25-001300
Chunk: 135

Company: VisionSys AI Inc
Filing Date: 2025-05-15
Form: 20-F
Item: Item 4
Chunk 135
---
 law; (iv) if a foreign investor or foreign-funded enterprise fails to report the investment information as required to the foreign investment information report system, the competent department for commerce concerned shall order it to make corrections within a time limit, and a fine of not less than 100,000 yuan but not more than 500,000 yuan shall be imposed if it fails to do so within the prescribed time limit; (v) the relevant department shall lawfully investigate and punish violations of laws and regulations committed by foreign investors and foreign-funded enterprises, and include the violations information into the credit information system under related state provisions.
Regulations on Internet Information Security and Privacy Protection
Pursuant to the PRC Cybersecurity Law issued by the Standing Committee of the National People’s Congress on November 7, 2016, effective as of June 1, 2017, “personal information” refers to all kinds of information recorded by electronic or otherwise that can be used to independently identify or be combined with other information to identify individuals’ personal information including but not limited to: individuals’ names, dates of birth, ID numbers, biologically identified personal information, addresses and telephone numbers, etc. The PRC Cybersecurity Law also provides that: (i) to collect and use personal information, network operators shall follow the principles of legitimacy, rightfulness and necessity, disclose rules of data collection and use, clearly express the purposes, means and scope of collecting and using the information, and obtain the consent of the persons whose data is gathered; (ii) network operators shall neither gather personal information unrelated to the services they provide, nor gather or use personal information in violation of the provisions of laws and administrative regulations or the scopes of consent given by the persons whose data is gathered; and shall dispose of personal information they have saved in accordance with the provisions of laws and administrative regulations and agreements reached with users; (iii) network operators shall not divulge, tamper with or damage the personal information they have collected, and shall not provide the personal information to others without the consent of the persons whose data is collected. However, if the information has been processed and cannot be recovered and thus it is impossible to match such information with specific persons, such circumstance is an exception. On March 28, 2025, the Cyberspace Administration of China published the Notice on Seeking Public Comments for the Cybersecurity Law of the People’s Republic of China (Draft Amendment for Comment). As of the date of this annual report, the Notice on Seeking Public Comments for the Cybersecurity