Company: MASK
Filing Date: 2025-06-24
Form Type: F-1
Source: 0001185185-25-000685
Chunk: 85

Company: 3 E Network Technology Group Ltd
Filing Date: 2025-06-24
Form: F-1
Chunk 85
---
2022. The Cybersecurity Review Measures provides that, in addition to critical information infrastructure operators that intend to purchase
Internet products and services, data processing operators engaging in data processing activities that affect or may affect national security
must be subject to cybersecurity review by the Cybersecurity Review Office of the PRC. According to the Cybersecurity Review Measures,
a cybersecurity review assesses potential national security risks that may be brought about by any procurement, data processing, or overseas
listing. The Measures for Cybersecurity Review (2021) further requires that critical information infrastructure operators and data
processing operators that possess personal data of at least one million users must apply for a review by the Cybersecurity Review Office
of the PRC before conducting listings in foreign countries.

On September 30, 2024, the CAC published the Data Security Management
Regulations , which provides that data processing operators engaging in data processing activities that affect or may affect national
security must be subject to network data security review by the relevant Cyberspace Administration of the PRC. According to the Data
Security Management Regulations, data processing operators who possess personal data of at least one million users or collect data that
affects or may affect national security must be subject to network data security review by the relevant Cyberspace Administration of the
PRC. On July 7, 2022, the CAC promulgated the Measures for the Security Assessment of Outbound Data Transfers, or the Measures,
which became effective from September 1, 2022. The Measures shall apply to the security assessment of the provision of important
data and personal information collected and generated by data processors in the course of their operations within the territory of the
PRC by such data processors to overseas recipients. The Measures stipulates the circumstances under which security assessment of outbound
data transfers should be declared, including: (i) outbound transfer of important data by a data processor; (ii) outbound transfer
of personal information by a critical information infrastructure operator or a personal information processor who has processed the personal
information of more than one million people; (iii) outbound transfer of personal information by a personal information processor
who has made outbound transfers of the personal information of 100,000 people cumulatively or the sensitive personal information of 10,000
people cumulatively since January 1 of the previous year; or (iv) other circumstances where an application for the security
assessment of an outbound data transfer is required as prescribed by the national cyberspace administration authority. Based