Company: JWEL
Filing Date: 2025-05-09
Form Type: 20-F
Source: 0001213900-25-041556
Chunk: 40

Company: Jowell Global Ltd.
Filing Date: 2025-05-09
Form: 20-F
Item: Item 4
Chunk 40
---
 issued theMeasures
for Security Reviews of Network Products and Services (Trial), or the Review Measures, which become effective on June 1, 2017.
The Review Measures establish the basic framework and principle for national security reviews of network products and services.

The recommended national standard, Information
Security Technology Personal Information Security Specification, puts forward specific refinement requirements on the collection,
preservation, use and commission processing, sharing, transfer, public disclosure, etc. Although it is not mandatory, in the absence of
clear implementation rules and standards for the law on cyber security and other personal information protection, it will be used as the
basis for judging and making determinations. On November 28, 2019, The Notice of Identification Method of Application Illegal Collection
and Use of Personal Information was issued, which provides a reference for the identification of App illegal collection and use of personal
information, and provides guidance for App operators’ self-inspection and self-correction and netizens’ social supervision.

As an online retail platform operator and service
provider, we are subject to these laws and regulations relating to the collection, use, storage, transfer, disclosure and security of
personally identifiable information with respect to our customers, vendors and employees including any requests from regulatory and government
authorities relating to this data. Further, PRC regulators have been increasingly focused on regulation in the areas of data security
and data protection. We expect that these areas will receive greater public scrutiny and attention from regulators, which could increase
our compliance costs and subject us to heightened risks and challenges. If we are unable to manage these risks, we could become subject
to penalties, fines, suspension of business and revocation of required licenses, and our reputation and results of operations could be
materially and adversely affected.

Measures for the Security Assessment of Data
Cross-border Transfer

On July 7, 2022, CAC promulgated the Measures
for the Security Assessment of Data Cross-border Transfer, effective on September 1, 2022, which requires the data processors to apply
for data cross-border security assessment coordinated by the CAC under the following circumstances: (i) any data processor transfers important
data to overseas; (ii) any critical information infrastructure operator or data processor who processes personal information of over 1
million people provides personal information to overseas; (iii) any data processor who provides personal information to overseas and has
already provided personal information of more than 100,000 people or sensitive personal information of more than