Company: GRAN
Filing Date: 2025-07-31
Form Type: 20-F
Source: 0001213900-25-069627
Chunk: 6

Company: Grande Group Ltd/HK
Filing Date: 2025-07-31
Form: 20-F
Item: Item 3
Chunk 6
---

are unable to comply with such PRC laws and regulations, our financial condition, and results of operations may be materially and adversely
affected.

We may become subject to a variety of laws and regulations in the PRC regarding privacy, data security, cybersecurity, data protection
and overseas offering. These laws and regulations are continuously evolving and developing. The scope and interpretation of the laws that
are or may be applicable to us are often uncertain and may be conflicting, particularly with respect to foreign laws. In particular, there
are numerous laws and regulations regarding privacy and the collection, sharing, use, processing, disclosure, and protection of personal
information and other user data. Such laws and regulations often vary in scope, may be subject to differing interpretations, and may be
inconsistent among different jurisdictions.

On June 10, 2021, the Standing Committee
of the National People’s Congress enacted the PRC Data Security Law, which took effect on September 1, 2021. The law requires
data collection to be conducted in a legitimate and proper manner, and stipulates that, for the purpose of data protection, data processing
activities must be conducted based on data classification and hierarchical protection system for data security.

On July 6, 2021, the General Office of the
Communist Party of China Central Committee and the General Office of the State Council jointly issued a document to crack down on illegal
activities in the securities market and promote the high-quality development of the capital market, which, among other things, requires
the relevant governmental authorities to strengthen cross-border oversight of law-enforcement and judicial cooperation, to enhance supervision
over China-based companies listed overseas, and to establish and improve the system of extraterritorial application of the PRC securities
laws.

On August 20, 2021, the 30thmeeting
of the Standing Committee of the 13thNational People’s Congress voted and passed the “ Personal Information Protection
Law of the People’s Republic of China”, or “ PRC Personal Information Protection Law,” or the “ PIPL,”
which became effective on November 1, 2021. The PRC Personal Information Protection Law applies to the processing of personal information
of natural persons within the territory of China that is carried out outside of China where (1) such processing is for the purpose
of providing products or services for natural persons within China, (2) such processing is to analyze or evaluate the behavior of
natural persons within China, or (3) there are