Company: LI
Filing Date: 2025-04-10
Form Type: 20-F
Source: 0001410578-25-000678
Chunk: 161

Company: Li Auto Inc.
Filing Date: 2025-04-10
Form: 20-F
Item: Item 4
Chunk 161
---
2021, the CAC, NDRC, MIIT, Ministry of Public Security, and Ministry of Transport jointly issued the Regulations on the Management of Automobile Data Security (for Trial Implementation), which took effect on October 1, 2021 and is aimed to regulate the activities of processing automobile data, including, without limitation, personal information and important data involved in the process of automotive design, production, sales, use, operation, and maintenance within the PRC territory. These regulations elaborate the principles and requirements for the protection of personal information and important data in the automobile industry scenarios. Automobile data processors are required to comply with the following principles and requirements when processing automobile data: (i) the principle of in-car processing: automobile data should be processed inside a car, unless it is absolutely necessary to provide the data outside the car; (ii) the principle of no collection by default: “No collection” should be set as default for every drive, unless the driver independently sets it otherwise; (iii) the principle of proper precision: the coverage and resolution of camera, radar, and others should be determined according to the data accuracy requirements of the functional services provided; and (iv) the principle of desensitization: anonymization and de-identification should be conducted as much as possible. Automobile data processors that process personal information are also required to notify individuals details on the data collected and use of data in an obvious way, such as a user manual, onboard display panel, audio, and vehicle use application. In addition, these regulations define “important data” as the data that may endanger national security, public interests, or the legitimate rights and interests of individuals or organizations if it is tampered with, damaged, disclosed, illegally obtained, or illegally used, including: (i) geographic information, passenger flow, vehicle flow, and other data of important sensitive areas such as military administrative zones, entities of science, technology and industry for national defense, and Chinese Communist Party organizations and government agencies at or above the county level; (ii) data reflecting economic operation such as vehicle flow and logistics; (iii) operational data of the automobile charging network; (iv) video and image data outside the vehicles that contain facial information and license plate information, among others; (v) personal information involving more than 100,000 subjects; and (vi) other data that may affect national security, public interest, and the legitimate rights and interests of individuals or organizations as specified by the CAC and other departments of the State Council. These regulations require that the