Company: CHNR
Filing Date: 2025-01-27
Form Type: POS AM
Source: 0001079973-25-000143
Chunk: 136

Company: CHINA NATURAL RESOURCES INC
Filing Date: 2025-01-27
Form: POS AM
Chunk 136
---
2021, the CAC, the MIIT, the MPS and the SAMR jointly issued the Rules on the Scope of Necessary Personal Information for Common Types of Mobile Internet Applications (the “Necessary Personal Information Rules”), which came into effect on May 1, 2021. According to the Necessary Personal Information Rules, mobile App operators shall not deny a user’ access to the basic functions and services of an App on the basis that such user refuses to provide his or her personal information which is not necessary for such use. The Necessary Personal Information Rules further stipulates the relevant scopes of necessary personal information for different types of mobile Apps.

On June 10, 2021, the SCNPC promulgated the Data Security Law, which took effect on September 1, 2021. The Data Security Law sets out a national data security review system, under which data processing activities that affect or may affect national security are subject to review. In addition, it clarifies the obligations to protect data security applicable to organizations and individuals who carry out data activities and discharges data security protection responsibilities. Data processors shall establish and improve a whole-process data security management system in accordance with the provisions of laws and regulations, organize and implement data security trainings as well as take appropriate technical measures and other necessary measures to protect data security. If the processing of any organization or personal data violate the Data Security Law, the responsible party shall bear the corresponding civil, administrative or criminal liabilities.

On July 30, 2021, the State Council promulgated the Regulation on Protecting the Security of Critical Information Infrastructure (“CII Regulations”), effective on September 1, 2021. According to the CII Regulations, “critical information infrastructure” has the meaning of an important network facility and information system in important industries such as, among others, public communications and information services, energy, transport, water conservation, finance, public services, e-government affairs and national defense science, as well as other important network facilities and information systems that may seriously endanger national security, the national economy, the people’s livelihood, or the public interests in the event of damage, loss of function, or data leakage. The competent governmental authorities as well as the supervisory and administrative authorities of the aforementioned important industries and sectors will be responsible for (i) organizing for the identification of critical information infrastructures in their respective industries in accordance with certain identification rules, and (ii) promptly notifying the operators so identified and the public security department of the State Council of the results of identification. As of