Company: NBRG
Filing Date: 2025-06-24
Form Type: DRS/A
Source: 0001213900-25-056981
Chunk: 131

Company: Newbridge Acquisition Ltd
Filing Date: 2025-06-24
Form: DRS/A
Chunk 131
---
 data classification and hierarchical protection system based on the importance of data in economic and social development, and the degree of harm it may cause to national security, public interests, or legitimate rights and interests of individuals or organizations if such data are tampered with, destroyed, leaked, illegally acquired or illegally used. The appropriate level of protection measures is required to be taken for each respective category of data. Moreover, the Data Security Law provides a national security review procedure for those data activities which affect or may affect national security and imposes export restrictions on certain data and information. In addition, the Data Security Law also provides that any organization or individual within the territory of the PRC shall not provide any foreign judicial body and law enforcement body with any data without the approval of the competent PRC governmental authorities. If we select a business combination target that operates in the PRC, the approval of the Cybersecurity Review Office (“CRO”), the Central Cyberspace Affairs Commission and / or other PRC authority may be required for our initial business combination under PRC law. In April 2020, the CAC and certain other PRC regulatory authorities promulgated the Measures for Cybersecurity Review, which requires that operators of critical information infrastructure must pass a cybersecurity review when purchasing network products and services which do or may affect national security. On January 4, 2022, the CAC, in conjunction with 12 other government departments issued the New Measures for Cybersecurity Review (the “New Measures”). The New Measures, which became effective on February 15, 2022, amends the Measures for Cybersecurity Review (Draft Revision for Comments) released on July 10, 2021. The New Measures require that certain operators of data processing activities that affect or may affect national security or that handle personal information of more than one million users must apply for cybersecurity review to the Cybersecurity Review Office when they go public abroad. The PRC Data Security Law, which took effect on September 1, 2021, imposes data security and privacy obligations on entities and individuals that carry out data activities, provides for a national security review procedure for data activities that may affect national security and imposes export restrictions on certain data and information. On August 20, 2021, the Standing Committee of the People’s Congress promulgated the PRC Personal Information Protection Law (the “PIPL”), which took effect on November 1, 2021. The PIPL sets out the regulatory framework for the handling and protection of personal information and the transmission of personal information overseas