Company: KNRX
Filing Date: 2025-09-02
Form Type: F-1/A
Source: 0001493152-25-012564
Chunk: 32

Company: KNOREX LTD.
Filing Date: 2025-09-02
Form: F-1/A
Chunk 32
---
, are increasingly strict and complex, change frequently and at times are in conflict among the various jurisdictions where we do business.

The industry self-regulatory bodies and governments, including the federal and state governments of the U.S., continue to consider and implement laws and regulations addressing data privacy, cybersecurity, and data protection laws, which include provisions relating to breaches. For example, statutory damages may be available to users through a private right of action for certain data breaches under the California Privacy Rights Act and potentially other states’ laws in the U.S., the General Data Protection Regulation in the European Union and the European Economic Area, the Singapore Personal Data Protection Act 2012 in Singapore, the Digital Personal Data Protection Act in India, Vietnam Personal Data Protection Decree in Vietnam, and the Personal Data Protection Act 2010 in Malaysia, in relation to the collection, use and/or disclosure of personal data. In certain jurisdictions there are laws and regulations that restrict the flow of data outside the country which may also constrain our activities and require the use of local servers. In any event, a significant security breach could materially harm our business, financial condition, and results of operations.

We may also be required to disclose personal data about an individual to a public agency, where the disclosure is necessary in the public interest, or for the purposes of policy formulation or review. Some of these disclosures may put us in a disadvantaged position, especially if the provided data is repurposed for another intent, or adequate protection is not accorded to such data. As such laws increase in their complexity and impose new requirements, we may be required to incur increased costs to comply with data privacy laws and could incur penalties for any non-compliance or breaches. These laws may also limit how we are able to use data.

Although we maintain and
continue to improve internal access control mechanisms and other security measures to ensure secure and appropriate access to and
storage and use of our sensitive, business, personal, financial or confidential information by anyone including our employees, customers,
partners and other relevant third parties, our IT and infrastructure can be attacked by hackers, computer malware, viruses, social engineering
(including phishing and ransomware attacks), or breached due to software bugs, human error, employee theft, misuse, misconduct, or malfeasance,
system failure, or other disruptions.

Any such breach could compromise our networks, and the data stored there could be accessed, held for ransom, publicly disclosed, misappropriated, lost, or stolen. Some of our systems will not be fully redundant, and any issues at