Company: TME
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0000950170-25-056949
Chunk: 52

Company: Tencent Music Entertainment Group
Filing Date: 2025-04-23
Form: 20-F
Item: Item 3
Chunk 52
---
 and sales of their personal information. Numerous other states also have enacted, or are considering enacting, comprehensive state-level privacy and data security laws that share similarities with the CCPA. In addition, laws in all 50 U.S. states require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a data breach. There is also discussion in the United States Congress of a new comprehensive federal data privacy law. We may be required to expend considerable resources to comply with applicable laws and regulations if and to the extent we expand our operations into the United States.
Moreover, while we strive to publish and prominently display privacy policies that are accurate, comprehensive, and compliant with applicable laws, regulations, industry standards and other obligations, we cannot ensure that our privacy policies and other statements regarding our practices will be sufficient to protect us from claims, proceedings, liability or adverse publicity relating to privacy and data security. Although we endeavor to comply with our privacy policies, we may at times fail to do so or be alleged to have failed to do so. If our public statements about our use, collection, disclosure and other processing of personal information, whether made through our privacy policies, information provided on our website, press statements or otherwise, are alleged to be deceptive, unfair or misrepresentative of our actual practices, we may be subject to potential government or legal investigation or action.
Regulatory requirements regarding privacy and data security are constantly evolving, making the extent of our responsibilities in that regard uncertain. Any failure, or perceived failure, by us or the VIEs, or by our third-party partners, to maintain the security of personal data or to comply with applicable privacy or data security laws, regulations, policies, contractual provisions, industry standards, and other requirements, may result in civil or regulatory liability, including actions and investigations, fines, penalties, enforcement orders requiring us to cease operating in a certain way, litigation, or adverse publicity, and may require us or the VIEs to expend significant resources in responding to and defending against allegations and claims. Moreover, claims or allegations that we and/or the VIEs have failed to adequately protect personal data, or otherwise violated applicable privacy and data security laws, regulations, policies, contractual provisions, industry standards, or other requirements, may result in damage to our reputation and a loss of confidence in us and/or the VIEs by users or partners, potentially causing us and/or the VIEs to lose users, advertisers, content providers, other business partners and revenues, which could have a