Company: TME
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0000950170-25-056949
Chunk: 177

Company: Tencent Music Entertainment Group
Filing Date: 2025-04-23
Form: 20-F
Item: Item 4
Chunk 177
---
 such as data classification, and back-up and encryption of important data; and (e) other obligations stipulated by laws and administrative regulations. In addition, network operators shall follow the principles of legitimacy to collect and use personal information and disclose their rules of data collection and use, clearly express the purposes, means and scope of collecting and using the information, and obtain the consent of the persons whose data is gathered.
Pursuant to the Notice of the Supreme People’s Court, the Supreme People’s Procuratorate and the Ministry of Public Security on Legally Punishing Criminal Activities Infringing upon the Personal Information of Citizens, issued on April 23, 2013, and the Interpretation of the Supreme People’s Court and the Supreme People’s Procuratorate on Several Issues regarding Legal Application in Criminal Cases Infringing upon the Personal Information of Citizens, which was issued on May 8, 2017 and took effect on June 1, 2017, the following activities may constitute the crime of infringing upon a citizen’s personal information: (i) providing a citizen’s personal information to specified persons or releasing a citizen’s personal information online or through other methods in violation of relevant national provisions; (ii) providing legitimately collected information relating to a citizen to others without such citizen’s consent (unless the information is processed, not traceable to a specific person and not recoverable); (iii) collecting a citizen’s personal information in violation of applicable rules and regulations when performing a duty or providing services; or (iv) collecting a citizen’s personal information by purchasing, accepting or exchanging such information in violation of applicable rules and regulations.
On January 23, 2019, the Office of the Central Cyberspace Affairs Commission and other three authorities jointly issued the Circular on the Special Campaign of Correcting Unlawful Collection and Usage of Personal Information via Apps. Pursuant to this circular, (i) app operators are prohibited from collecting any personal information irrelevant to the services provided by such operator; (ii) information collection and usage policy should be presented in a simple and clear way, and such policy should be consented by the users voluntarily; and (iii) authorization from users should not be obtained by coercing users with default or bundling clauses or making consent a condition of a service. App operators violating such rules may be ordered by authorities to rectify within a given period of time and those that refuse to rectify may be disclosed to the public. Provided that the circumstances are serious, the relevant business may be suspended,