Company: ZK
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001410578-25-000390
Chunk: 144

Company: ZEEKR Intelligent Technology Holding Ltd
Filing Date: 2025-03-20
Form: 20-F
Item: Item 4
Chunk 144
---
 personal consent or comply with laws and administrative regulations in other circumstances; (ii) for the processing of sensitive personal information, automobile data processor shall obtain separate consent from individuals, and meet specific requirements, including without limitation to process sensitive personal information for the purpose of enhancing driving safety; and (iii) automobile data processors shall collect biometric information only with sufficient necessity and for the purpose to enhance driving safety. Where the automobile data processors collect data containing images of people outside the vehicle and transmit the data out of the vehicle for the purpose of improving driving safety, such personal information shall be anonymized if it is not possible to obtain the consent of these people. The Provisions on MADS define the term “important data” as any data that, once tampered with, sabotaged, leaked or illegally obtained or used, may lead to endangerment of national security or public interests, or infringement of the lawful rights and interests of an individual or organization, including the following data: (i) geographical information, flows of people or vehicles and other data in respect of any important sensitive area such as a military administrative zone, national defense science and technological development entity, or Party or government agency at or above the county level; (ii) traffic volume, logistics and other data that reflect performance of the economy; (iii) operating data of a vehicle charging network; (iv) video or image data collected outside of a vehicle, including human facial information, license plate information, etc.; (v) personal information of more than 100,000 data subjects; and (vi) other types of data that may endanger national security, public interests, or the lawful rights and interests of individual or organization as designated by the competent authorities. The Provisions on MADS require automobile data processors who process important data to: (i) store important data domestically and pass the security assessment organized by the CAC in conjunction with relevant authorities of the State Council if it’s necessary to provide such data outside of China due to business needs; (ii) perform risk assessment in accordance with the regulations and submit risk assessment reports to relevant authorities at provincial levels; and (iii) report annually to such authorities on automotive data security management.
On June 10, 2021, the SCNPC promulgated the PRC Data Security Law, which came into effect on September 1, 2021. The PRC Data Security Law provides for data security and privacy obligations on entities and individuals carrying out data processing activities, introduces a data classification and hierarchical protection system based on the importance of data in