Company: SOS
Filing Date: 2025-07-31
Form Type: 424B5
Source: 0001213900-25-069766
Chunk: 79

Company: SOS Ltd
Filing Date: 2025-07-31
Form: 424B5
Chunk 79
---
 which may endanger national security,
people’s livelihoods and public interest in the event of damage, function loss or data leakage. In addition, relevant administrative
departments of each critical industry and sector, shall be responsible to formulate eligibility criteria and determine the critical information
infrastructure operator in the respective industry or sector. The operators shall be informed about the final determination as to whether
they are categorized as critical information infrastructure operators. As of the date of this prospectus, the exact scope of “critical
information infrastructure operators” under the current regulatory regime remains unclear, and we have not been informed that we
are identified as a critical information infrastructure operator by any governmental authorities. Furthermore, since the Measures for
Cybersecurity Review is relatively new and the determination of “affecting national security” are subject to further explanations
and interpretations, there remain uncertainties as to whether our data processing activities may be deemed to affect national security
and whether we would be required to apply for a cybersecurity review. In light of such uncertainties in relation to the interpretations
and implementation of Measures for Cybersecurity Review, we cannot predict the impact of the Measures for Cybersecurity Review and will
continue to closely monitor and assess the statutory developments in this regard. If we are identified as an operator of “critical
information infrastructure,” we would be required to fulfill various obligations as required under PRC cybersecurity laws and other
applicable laws for such operators of “critical information infrastructure,” and we may be subject to cybersecurity review
procedure before making certain purchases of network products and services, which could lead to adverse impacts on our business and a
diversion of time and attention of our management and our other resources. Furthermore, there can be no assurance that we will obtain
the clearance or approval for these applications from the Cybersecurity Review Office and the relevant regulatory authorities in a timely
manner, or at all. If we are found to be in violation of cybersecurity requirements of the PRC, the relevant governmental authorities
may conduct investigations, levy fines, or require us to change our business practices in a manner materially adverse to our business.
Any of these actions may disrupt our operations and adversely affect our business, results of operations and financial condition. Currently,
the cybersecurity laws and regulations in force have not directly affected our business and operations, but in anticipation of the strengthened
implementation of cybersecurity laws and regulations and the expansion of our business, we face potential risks if we are deemed as a
CIIO under the Cybersecurity Law. In such case, we must fulfill certain obligations as required