Company: FEBO
Filing Date: 2025-05-14
Form Type: 20-F
Source: 0001641172-25-010075
Chunk: 90

Company: Fenbo Holdings Ltd
Filing Date: 2025-05-14
Form: 20-F
Item: Item 4
Chunk 90
---
years of age to take all practical steps to ensure the employee becomes a member of a registered MPF Scheme. Subject to the minimum and
maximum relevant income levels, it is mandatory for both employers and their employees to contribute 5% of the employee’s relevant
income to the MPF Scheme. Any employer who contravenes this requirement commits a criminal offence and is liable on conviction to a fine
and imprisonment.

As of the date of this Annual
Report, the Company believes it has made all contributions required under the MPFSO.

Regulations related to Personal Data

Personal Data (Privacy)
Ordinance (Chapter 486 of the Laws of Hong Kong). The Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong),
or the PDPO, imposes a statutory duty on data users to comply with the requirements of the six data protection principles (the “ Data
Protection Principles”) contained in Schedule 1 to the PDPO. The PDPO provides that a data user shall not do an act, or engage in
a practice, that contravenes a Data Protection Principle unless the act or practice, as the case may be, is required or permitted under
the PDPO. The six Data Protection Principles are:

  Principle 1 - purpose and manner of collection of personal data;    
  Principle 2 - accuracy and duration of retention of personal data;  
  Principle 3 - use of personal data;                                 
  Principle 4 - security of personal data;                            
  Principle 5 - information to be generally available; and            
  Principle 6 - access to personal data.                              

Non-compliance with a Data Protection
Principle may lead to a complaint to the Privacy Commissioner for Personal Data (the “ Privacy Commissioner”). The Privacy
Commissioner may serve an enforcement notice to direct the data user to remedy the contravention and/or instigate prosecution actions.
A data user who contravenes an enforcement notice commits an offense which may lead to a fine and imprisonment.

The PDPO also gives data subjects
certain rights, inter alia:

  the right to be informed by a data user whether the data user holds personal data of which the individual is the data subject;  
  if the data user holds such data, to be supplied with a copy of such data; and                                                  
  the right to request correction of any data they consider to be inaccurate.                                                     

The PDPO criminalizes, including
but not limited to, the misuse or inappropriate use of personal data in