Company: LI
Filing Date: 2025-04-10
Form Type: 20-F
Source: 0001410578-25-000678
Chunk: 133

Company: Li Auto Inc.
Filing Date: 2025-04-10
Form: 20-F
Item: Item 4
Chunk 133
---
 all the data accumulated in developing autonomous driving technologies. Our business does not involve any cross-border data transfer. In particular, we have adopted and implemented strict internal protocols to ensure the security of data we collect in the development of autonomous driving technologies in accordance with PRC laws. We do not provide any data to or share such data with any foreign individuals and entities, or any foreign-invested enterprises established in China. We do not allow any unauthorized person to obtain such data in the technology tests and road tests. Pursuant to the PRC Law on Guarding State Secrets, the authorities must mark state secrets on all the media that carry information involving state secrets, and if the information does not involve state secrets, it should not be marked as state secrets. When engaging in the aforementioned business, we did not see any state secret marks on the media. To the best of our knowledge, we believe that the data we collect and store does not give rise to any state secret concern in any material respect.
With the level of intelligence and connectivity of vehicles, and our highly integrated system that interacts with the users, we place strong emphasis on data security and protection. We have adopted and implemented a strict internal control system focusing on data security and personal information protection. The privacy policies with respect to the collection, use, and disclosure of user data have been posted on the websites and mobile apps that we operate, which inform the users of the purposes, methods, and scope of collecting and using their personal information. We do not use users’ data for any purpose that has not been consented by the users or is not necessary for our provision of services to the users. We have implemented procedures to regulate our employees’ actions in relation to user data in order to protect user privacy and data security. We also have adopted a strict access control mechanism to protect user privacy while meeting business requirements. In addition, we employ a variety of technical solutions to prevent and detect risks in user privacy and data security, such as encryption and log audit. Our internal cloud data security team as well as external data security experts constantly examine and test our data security system to ensure that any vulnerability identified is fixed immediately. Our user database can only be accessed by our designated and authorized personnel after approval, whose actions are recorded and monitored constantly by our internal cloud data security team. Without due consent and authorization from users or going through compliance procedures, we will not provide personal data to our business partners. We strictly follow the terms of authorization and the scope of usage set forth in the agreements with our users when processing and