Company: APAD
Filing Date: 2025-05-22
Form Type: S-1
Source: 0001213900-25-046705
Chunk: 269

Company: AParadise Acquisition Corp.
Filing Date: 2025-05-22
Form: S-1
Chunk 269
---
 operations in China must be stored in China, and if a critical information infrastructure operator purchases internet products and services that affects or may affect national security, it should be subject to cybersecurity review by the Cyberspace Administration of China (“CAC”). In April 2020, the CAC and certain other PRC regulatory authorities promulgated the Measures for Cybersecurity Review, which requires that operators of critical information infrastructure must pass a cybersecurity review when purchasing network products and services which do or may affect national security. On January 4, 2022, the CAC, in conjunction with 12 other government departments issued the New Measures. The New Measures amends the Measures for Cybersecurity Review (Draft Revision for Comments) (the “Draft Measures”) released on July 10, 2021 and came into effect on February 15, 2022. The New Measures include data processing activities of network platform operators that affect or may affect national security into cybersecurity 156 review and clarify that network platform operators with personal information of more than one million users must apply for cybersecurity review to the Cybersecurity Review Office when they go public abroad. The PRC Data Security Law, which took effect on September 1, 2021, imposes data security and privacy obligations on entities and individuals that carry out data activities, provides for a national security review procedure for data activities that may affect national security and imposes export restrictions on certain data and information. On August 20, 2021, the Standing Committee of the People’s Congress promulgated the PRC Personal Information Protection Law (the “PIPL”), which is to take effect on November 1, 2021. The PIPL sets out the regulatory framework for the handling and protection of personal information and the transmission of personal information overseas. If our potential future target business in China involves collecting and retaining internal or customer data, it is our management’s understanding that such target business might be subject to the relevant cybersecurity laws and regulations, including the PRC Cybersecurity Law and the PIPL as discussed above, and that such target business needs to go through the cybersecurity review process before effecting a business combination if it is deemed as a critical information infrastructure operator purchasing internet products and services that affects or may affect national security, a network platform operator that affect or may affect national security, or a network platform operator with personal information of more than one million users. Since the New Measures is new, the implementation and interpretation thereof are not yet clear. See “ Risk Factors — Risks Associated with Acquiring and Operating a Target Business