Company: FEBO
Filing Date: 2025-05-14
Form Type: 20-F
Source: 0001641172-25-010075
Chunk: 19

Company: Fenbo Holdings Ltd
Filing Date: 2025-05-14
Form: 20-F
Item: Item 3
Chunk 19
---
 to investors and cause
our Ordinary Shares to significantly decline in value or be worthless.

On June 10, 2021, the Standing
Committee of the National People’s Congress enacted the PRC Data Security Law, which took effect on September 1, 2021. The law requires
data collection to be conducted in a legitimate and proper manner and stipulates that, for the purpose of data protection, data processing
activities must be conducted based on data classification and a hierarchical protection system for data security.

On July 6, 2021, the General Office
of the Communist Party of China Central Committee and the General Office of the State Council jointly issued a document to crack down
on certain activities in the securities market and promote the high-quality development of the capital markets, which, among other things,
requires the relevant governmental authorities to strengthen cross-border oversight of law enforcement and judicial cooperation, to enhance
supervision over China-based companies listed overseas and to establish and improve the system of extraterritorial application of the
PRC securities laws.

On August 20, 2021, the 30th meeting
of the Standing Committee of the 13th National People’s Congress voted and passed the “ Personal Information Protection Law
of the People’s Republic of China,” or the “ PRC Personal Information Protection Law,” which became effective on
November 1, 2021. The PRC Personal Information Protection Law applies to the processing of personal information of natural persons within
the territory of China that is carried out outside of China where (i) such processing is for the purpose of providing products or services
for natural persons within China; (ii) such processing is to analyze or evaluate the behavior of natural persons within China; or (iii)
there are any other circumstances stipulated by related laws and administrative regulations.

  14  

On December 28, 2021, the CAC,
jointly with the relevant authorities, formally published Measures for Cybersecurity Review (2021) which took effect on February 15, 2022
and replaced the former Measures for Cybersecurity Review (2020) issued on April 13, 2020. Measures for Cybersecurity Review (2021) stipulates
that operators of critical information infrastructure purchasing network products and services and online platform operators (together
with the operators of critical information infrastructure, the “ Operators”) carrying out data processing activities that affect
or may affect national security shall conduct a cybersecurity review and any online platform operator who controls more