Company: ZK
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001410578-25-000390
Chunk: 77

Company: ZEEKR Intelligent Technology Holding Ltd
Filing Date: 2025-03-20
Form: 20-F
Item: Item 3
Chunk 77
---
structures; (ii) to plan, construct or put into use the security protection measures and the critical information infrastructures simultaneously; and (iii) to report to the competent Protection Departments in a timely manner in the event of merger division or dissolution, and deal with critical information infrastructures as required by the competent Protection Departments. Operators in violation of the regulations may be ordered to rectify, subject to warnings, fines and other administrative penalties or even criminal liabilities, and the directly responsible personnel in charge may also be imposed on fines or other liabilities.

43

We have developed a data-driven, closed-loop digital platform to manage our customer interactions from sales leads to customer reviews. If we are deemed to be a CIIO, we would be required to follow cybersecurity review procedures. During such review, we may be required to suspend providing any existing or new services to our customers and/or experience other disruptions of our operations, and such review could also result in negative publicity with respect to our Company and diversion of our managerial and financial resources. As of the date of this annual report, we have not been informed by any Protection Departments that we have been identified as a CIIO.
Furthermore, according to the Cybersecurity Review Measures, in addition to CIIOs, any “network platform operator” carrying out data processing activities that affect or may affect national security or “network platform operator” holding over one million users’ personal information and is going to list its securities “in a foreign country” should also be subject to the cybersecurity review. The relevant PRC governmental authorities may initiate a cybersecurity review if they determine certain network products, services, or data processing activities may affect national security. Cybersecurity Review Measures further elaborate the factors to be considered when assessing the national security risks of the relevant activities, including among others, the risk of core data, important data or a large amount of personal information being stolen, leaked, destroyed, and illegally used or exited the country, or the risk of critical information infrastructure, core data, important data or a large amount of personal information being affected, controlled and maliciously used by overseas governments after being listed abroad. When providing services to our customers, we have access to certain data, including certain personal information and important data. As a network platform operator who possesses personal information of more than one million users for purposes of the Cybersecurity Review Measures, we have completed a cybersecurity review with respect to our listing on the NYSE pursuant to the Cybersecurity Review Measures.
Any non-compliance or perceived non-compliance with the PRC Cybersecurity Law or related regulations