Company: PLSAY
Filing Date: 2025-05-09
Form Type: 20-F
Source: 0001884082-25-000012
Chunk: 132

Company: Polestar Automotive Holding UK PLC
Filing Date: 2025-05-09
Form: 20-F
Item: Item 4
Chunk 132
---
 fully electric car manufacturing companies should also be subject to strict scrutiny and the establishment of low-level manufacturing companies should be avoided. Additionally, considering the current large volumes of new energy vehicles in China, MIIT is also starting to strictly control contract manufacturing of new energy vehicles in PRC. As of result of such control, MIIT has possibilities not to approve car model homologation for contract manufacturing, especially foreign related.

Further, in order to be able to operate in China, Polestar and its subsidiaries are subject to permission requirements from the following regulatory bodies:

• SAMR;

• MEP; and

• General Administration of Customs.

Polestar and its subsidiaries have received all requisite permissions to operate in China and have not been denied any permissions in the past. These permissions include the following:

• Business License;

• Pollutants Discharge Permit; and

• Customs Declaration Registration Certificate or Customs Declaration Enterprise Record Receipt.

See Item 3. D “ Risk Factors - Risks Related to Polestar’s Business and Industry - Polestar and its subsidiaries (i) may not receive or maintain permissions or approvals from the CAC or other relevant authorities to operate in China, (ii) may inadvertently conclude that such permissions or approvals are not required or (iii) may be required to obtain new permissions or approvals in the future due to changes in applicable laws, regulations, or interpretations related thereto” for more information regarding risks associated with Polestar’s and its subsidiaries’ operations in China.

Focused regulatory areas

Some regulatory areas are rapidly changing within all the above-mentioned regulatory frameworks. The ones listed below are of key importance to Polestars products moving forward.

• Cyber security and privacy

• Electric vehicle safety

• Autonomous drive

In some of the relevant markets new requirements are enforced as guidelines and policies rather than regulations. Polestar’s ambition is always to meet relevant requirements for each product, market, and time frame.

Table of Contents

Cyber security and privacy

Cybersecurity and cybersecurity management systems are being regulated in many markets to enhance data security protection measures and to minimize the risks associated with cyber threats.

Data privacy and data protection laws in the markets where Polestar operates influence Polestar’s abilities to collect and use personal information. For most markets, Polestar’s connected vehicle services, as well as its sales and marketing activities, are subject to European laws, including the EU General Data Protection Regulation 2016/679 (GDPR), in addition to applicable national law in each market, which impose requirements on processing of personal information. Following general guidance