Company: ZK
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001410578-25-000390
Chunk: 142

Company: ZEEKR Intelligent Technology Holding Ltd
Filing Date: 2025-03-20
Form: 20-F
Item: Item 4
Chunk 142
---
, contents released by users and release time) for not less than 60 days.
On July 1, 2015, the SCNPC issued the PRC National Security Law, which became effective on the same day. The PRC National Security Law provides that the state shall safeguard the sovereignty, security and cyber security development interests of the state, and that the state shall establish a national security review and supervision system to review, among other things, foreign investment, specific items and key technologies, internet and information technology products and services, and other important activities that are likely to impact the national security of China.
In November 2016, the SCNPC promulgated the PRC Cybersecurity Law, which became effective on June 1, 2017. According to the PRC Cybersecurity Law, network constructors, network operators and service providers that provide services via networks are obligated to take technical and other necessary measures to ensure the security and stable operation of networks, maintain the integrity, confidentiality and availability of network data, and furthermore provide technical assistance and support in accordance with the law for public security and national security authorities to protect national security or assist with criminal investigations. In addition, the PRC Cybersecurity Law provides that personal information and important data collected and generated by operators of critical information infrastructure in the course of their operations in the PRC should be stored in the PRC, and the law imposes heightened regulation and additional security obligations on operators of critical information infrastructure. On September 12, 2022, the CAC proposed a series of draft amendments to the PRC Cybersecurity Law, which impose more stringent legal liabilities for certain violations.

77

The General Administration of Quality Supervision, Inspection and Quarantine and Standardization Administration issued the Standard of Information Security Technology Personal Information Security Specification (2017 edition), which took effect in May 2018, and the Standard of Information Security Technology Personal Information Security Specification (2020 edition), which took effect in October 2020. Pursuant to these standards, any entity or person who has the authority or right to determine the purposes for and methods of using or processing personal information are seen as a personal data controller. Such personal data controller is required to collect information in accordance with applicable laws, and prior to collecting such data, the information provider’s consent is required.
The Office of the Central Cyberspace Affairs Commission and the SAMR issued the Announcement on Launching the Security Certification of Apps and the appendix Rules for Implementing the Security Certification of Mobile Internet Applications (APP) on March 13,