Company: JWEL
Filing Date: 2025-05-09
Form Type: 20-F
Source: 0001213900-25-041556
Chunk: 39

Company: Jowell Global Ltd.
Filing Date: 2025-05-09
Form: 20-F
Item: Item 4
Chunk 39
---
1, 2015, the Ninth Amendment
to the Criminal Law of the PRCissued by the SCNPC became effective, pursuant to which, any internet service provider that fails
to comply with obligations related to internet information security administration as required by applicable laws and refuses to rectify
upon order is subject to criminal penalty for (i) any large-scale dissemination of illegal information; (ii) any severe consequences
due to the leakage of the user information; (iii) any serious loss of criminal evidence; or (iv) other severe circumstances.
Furthermore, any individual or entity that (i) sells or distributes personal information in a manner which violates relevant regulations,
or (ii) steals or illegally obtain any personal information is subject to criminal penalty under severe circumstances.

On June 1, 2017, the Cyber Security Law
of the PRC, or the Cyber Security Law, promulgated by SCNPC took effect, which is formulated to maintain the network security, safeguard
the cyberspace sovereignty, national security and public interests, protect the lawful rights and interests of citizens, legal persons
and other organizations, and requires that a network operator, which includes, among others, internet information services providers,
take technical measures and other necessary measures to safeguard the safe and stable operation of the networks, effectively respond to
the network security incidents, prevent illegal and criminal activities, and maintain the integrity, confidentiality and availability
of network data. The Cyber Security Law reaffirms the basic principles and requirements set forth in other existing laws and regulations
on personal information protections and strengthens the obligations and requirements of internet service providers, which include but
are not limited to: (i) keeping all user information collected strictly confidential and setting up a comprehensive user information
protection system; (ii) abiding by the principles of legality, rationality and necessity in the collection and use of user information
and disclosure of the rules, purposes, methods and scopes of collection and use of user information; and (iii) protecting users’
personal information from being leaked, tampered with, destroyed or provided to third parties. Any violation of the provisions and requirements
under the Cyber Security Law and other related regulations and rules may result in administrative liabilities such as warnings, fines,
confiscation of illegal gains, revocation of licenses, suspension of business, and shutting down of websites, or, in severe cases, criminal
liabilities. After the release of the Cyber Security Law, on May 2, 2017, Cyberspace Administration of China