Company: FENG
Filing Date: 2025-04-18
Form Type: 20-F
Source: 0000950170-25-055759
Chunk: 66

Company: Phoenix New Media Ltd
Filing Date: 2025-04-18
Form: 20-F
Item: Item 4
Chunk 66
---
 information forthwith, take deletion and other handling measures, retain the relevant records and timely submit a report to the CAC or its local counterparts.

On November 28, 2019, the Secretary Bureau of the CAC, the General Office of the MIIT, the General Office of the Ministry of Public Security and the General Office of the SAMR promulgated theIdentification Method of Illegal Collection and Use of Personal Information Through App, which provides guidance for the regulatory authorities to identify the illegal collection and use of personal information through mobile apps, and for the app operators to conduct self-examination and self-correction and for other participants to voluntarily monitor compliance.

On July 22, 2020, MIIT issued the Notice on Carrying out Special Rectification Actions in Depth against the Infringement upon Users' Rights and Interests by Apps, the tasks of which includes rectification of (i) illegally processing personal information of users by the APP and the SDK; (ii) setting up obstacles and frequently harassing users; (iii) cheating and misleading users; (iv) inadequate implementation of application distribution platforms’ responsibilities.

On January 22, 2021, the CAC released theAdministrative Provisions on the Information Services Provided Through Official Accounts of Internet Users, or the Administrative Provisions, which became effective on February 22, 2021. The Administrative Provisions aim to regulate the activities providing and using Internet official accounts to engage in Information publishing services within the territory of the PRC.

On June 10, 2021, the National People’s Congress Standing Committee released the PRC Data Security Law, which became effective on September 1, 2021. The PRC Data Security Law stipulates the measures to support and promote data security and development, to establish and optimize the national data security management system, and to clarify organizations’ and individuals’ responsibilities in data security. According to the PRC Data Security Law, data processing activities shall be carried out in accordance with PRC laws and regulations, establishing and improving the data security management system of the whole process, organizing and carrying out data security education and training, and taking corresponding technical measures and other necessary measures to guarantee data security. Where data processing activities are carried out through the Internet and other information networks, the above-mentioned data security protection obligations shall be fulfilled on the basis of the hierarchical network security protection system. In carrying out data processing activities, risk monitoring shall be strengthened, and remedial measures shall be taken immediately when data security defects, loopholes and other