Company: TME
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0000950170-25-056949
Chunk: 46

Company: Tencent Music Entertainment Group
Filing Date: 2025-04-23
Form: 20-F
Item: Item 3
Chunk 46
---
 technical infrastructure to the satisfaction of our users may harm our reputation and ability to retain existing users and attract new users. Although we have in place systems and processes that are designed to protect our data and our users’ data, prevent data loss, disable undesirable accounts and activities on our platform, and prevent or detect security breaches, we cannot assure you that such measures will provide absolute security. We may incur significant costs in protecting against cyber-attacks, and if an actual or perceived breach of security occurs to our systems or a third party’s systems, we could be required to expend significant resources to mitigate the breach of security and to address matters related to any such breach, including notifying users or regulators.
Complying with evolving laws, regulations and other obligations regarding cybersecurity, information security, privacy and data protection and other related laws, regulations and obligations may be expensive and may force us to make adverse changes to our business. Many of these laws, regulations and other obligations are subject to changes and uncertain interpretations, and any failure or perceived failure to comply with these laws, regulations and other obligations could result in negative publicity, legal proceedings, suspension or disruption of operations, increased cost of operations, or otherwise harm our business.
We are subject to a variety of laws, regulations and other obligations relating to the security and privacy of data, including restrictions on the collection, use, storage, transfer and other processing of personal information and requirements to take steps to prevent unauthorized access to, or the unauthorized destruction, use, modification, acquisition, disclosure, release or transfer of, personal data.

The PRC regulatory authorities have in recent years strengthened the oversight on cybersecurity and data privacy. According to the institutional reform plan of the State Council approved by the National People’s Congress on March 10, 2023, the National Data Bureau has been established under the administration of the NDRC on October 25, 2023. The National Data Bureau is responsible for, among other things, advancing the development of data-related fundamental institutions, coordinating the integration, sharing, development and application of data resources, and promoting the digitalization of the Chinese economy and society.
The PRC Cyber Security Law, which became effective in June 2017, created China’s first national-level data protection regime for “network operators,” which may include all organizations in China that provide services over the Internet or other information network. Specifically, the PRC Cyber Security Law provides that China adopts a multi-level protection scheme, under which network operators are required to perform obligations of security protection to ensure that the network is free from interference