Company: LI
Filing Date: 2025-04-10
Form Type: 20-F
Source: 0001410578-25-000678
Chunk: 155

Company: Li Auto Inc.
Filing Date: 2025-04-10
Form: 20-F
Item: Item 4
Chunk 155
---
 Cybersecurity Law may subject an internet information services provider to warnings, fines, confiscation of illegal gains, revocation of licenses, cancelation of filings, shutdown of websites, or criminal liabilities.
On September 12, 2022, the CAC released the Notice on Seeking Public Comments on the Decision on Amending the Cybersecurity Law of the People’s Republic of China (Draft for Public Comments), which imposes more stringent legal liabilities and raises the upper limit of monetary fines for serious violation of the security protection obligations of network operation, network information, critical information infrastructure and personal information under the Cybersecurity Law to RMB50 million or 5% of the company’s total sales from the previous year.
The Decision on Maintenance of Cybersecurity enacted by the Standing Committee of the National People’s Congress on December 28, 2000, as amended in August 2009, stipulates, among others, that the following activities conducted via internet are subject to criminal penalty if they constitute crimes under PRC law: (i) hacking into a computer or system of strategic importance; (ii) intentionally inventing and spreading destructive programs such as computer viruses to attack computer systems and communications networks, thus damaging computer systems and the communications networks; (iii) disconnecting computer networks or communications services without authorization in violation of laws and regulations; (iv) divulging state secrets; (v) spreading false commercial information; or (vi) infringing intellectual property rights via internet.
The Provisions on Technological Measures for Cybersecurity Protection promulgated on December 13, 2005 by the Ministry of Public Security requires internet service providers and organizations that use interconnection services to implement technical measures for cybersecurity protection from any threat to network security, such as computer viruses and network attacks and breaches. All internet access service providers are required to take measures to keep a record of and preserve user registration information. Under these measures, value-added telecommunications services license holders must regularly update information security and content control systems for their websites and must also report any public dissemination of prohibited content to local public security authorities. If a value-added telecommunications services license holder violates these measures, the Ministry of Public Security and the local security bureaus may revoke its operating license and shut down its websites.

89

Pursuant to the Decision on Strengthening the Protection of Online Information issued by the Standing Committee of the National People’s Congress in 2012 and the Provisions on the Protection of Telecommunication and Internet User Personal Information issued by the MIIT in 2013 and the Cybersecurity Law,