Company: MEGL
Filing Date: 2025-06-27
Form Type: F-1/A
Source: 0001641172-25-016831
Chunk: 42

Company: Magic Empire Global Ltd
Filing Date: 2025-06-27
Form: F-1/A
Chunk 42
---
ers. On July 6, 2021, the General Office of the Communist Party of China Central Committee and the General Office of the State Council jointly issued a document to crack down on illegal activities in the securities market and promote the high-quality development of the capital market, which, among other things, requires the relevant governmental authorities to strengthen cross-border oversight of law-enforcement and judicial cooperation, to enhance supervision over Mainland China-based companies which listed overseas, and to establish and improve the system of extraterritorial application of the PRC securities laws. Furthermore, on July 10, 2021, the CAC issued a revised draft of the Measures for Cybersecurity Review for public comments, which required that, among others, in addition to “operator of critical information infrastructure”, any “data processor” controlling personal information of no less than one million users which seeks to list in a foreign stock exchange should also be subject to cybersecurity review, and further elaborated the factors to be considered when assessing the national security risks of the relevant activities. On December 28, 2021, the CAC, the National Development and Reform Commission (“NDRC”), and several other administrations jointly issued the revised Measures for Cybersecurity Review, or the “Revised Review Measures”, which became effective and replaced the existing Measures for Cybersecurity Review on February 15, 2022. According to the Revised Review Measures, if an “online platform operator” that is in possession of personal data of more than one million users intends to list in a foreign country, it must apply for a cybersecurity review. Based on a set of Q&As published on the official website of the State Cipher Code Administration in connection with the issuance of the Revised Review Measures, an official of the said administration indicated that an online platform operator should apply for a cybersecurity review prior to the submission of its listing application with non-P RC securities regulators. Moreover, the CAC released the draft of the Regulations on Network Data Security Management in November 2021 for public consultation, which among other things, stipulates that a data processor listed overseas must conduct an annual data security review by itself or by engaging a data security service provider and submit the annual data security review report for a given year to the municipal cybersecurity department before January 31 of the following year. Given the recent issuance of the Revised Review Measures and their pending effectiveness, there is a general lack of guidance and substantial uncertainties exist with respect to their interpretation and implementation.

| 22 |

It remains unclear whether a Hong Kong company shall be subject