Company: RAYA
Filing Date: 2025-09-29
Form Type: 424B5
Source: 0001185185-25-001296
Chunk: 154

Company: Erayak Power Solution Group Inc.
Filing Date: 2025-09-29
Form: 424B5
Chunk 154
---
our operations as well as regarding our employees. The integrity and protection of our customer, employee and company data is critical
to our business. Our customers and employees expect that we will adequately protect their personal information. We are required by applicable
laws to keep strictly confidential the personal information that we collect, and to take adequate security measures to safeguard such
information.

The PRC Criminal Law, as amended by its Amendment
7 (effective on February 28, 2009) and Amendment 9 (effective on November 1, 2015), prohibits institutions, companies and their employees
from selling or otherwise illegally disclosing a citizen’s personal information obtained during the course of performing duties
or providing services or obtaining such information through theft or other illegal ways. On November 7, 2016, the Standing Committee of
the PRC National People’s Congress issued the Cyber Security Law of the PRC, or Cyber Security Law, which became effective on June
1, 2017.

Pursuant to the Cyber Security Law, network operators
must not, without users’ consent, collect their personal information, and may only collect users’ personal information necessary
to provide their services. Providers are also obliged to provide security maintenance for their products and services and shall comply
with provisions regarding the protection of personal information as stipulated under the relevant laws and regulations.

The Civil Code of the PRC (issued by the PRC National
People’s Congress on May 28, 2020 and effective from January 1, 2021) provides main legal basis for privacy and personal information
infringement claims under the Chinese civil laws. PRC regulators, including the Cyberspace Administration of China, MIIT, and the Ministry
of Public Security have been increasingly focused on regulation in the areas of data security and data protection.

The PRC regulatory requirements regarding cybersecurity
are constantly evolving. For instance, various regulatory bodies in China, including the Cyberspace Administration of China, the Ministry
of Public Security and the SAMR, have enforced data privacy and protection laws and regulations with varying and evolving standards and
interpretations. In April 2020, the Chinese government promulgated Cybersecurity Review Measures, which came into effect on June 1, 2020.
According to the Cybersecurity Review Measures, operators of critical information infrastructure must pass a cybersecurity review when
purchasing network products and services which do or may affect national security.

In November 2016, the Standing Committee of China’s
National People