Company: JXG
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001213900-25-043744
Chunk: 101

Company: JX Luxventure Group Inc.
Filing Date: 2025-05-15
Form: 20-F
Item: Item 4
Chunk 101
---

through their operations in China; and the cross-border transfer of important data collected and generated by other data processors shall
be subject to the administrative measures adopted by the CAC in conjunction with other competent departments.

On July 7, 2022, the CAC promulgated the Security
Assessment Measures for Cross-border Data Transfers with effect from September 1, 2022, a data processor shall declare security assessment
for its outbound data transfer if: (i)where a data processor provides critical data abroad;(ii) where a critical information infrastructure
operator or a data processor processing the personal information of more than one million individuals provides personal information abroad;
(iii) where a data processor has provided personal information of 100,000 individuals or sensitive personal information of 10,000 individuals
in total abroad since January 1 of the previous year; and (iv) any other circumstances prescribed by the CAC.

On November 14, 2021, the CAC released the Regulations
for the Administration of Network Data Security (Draft for Comments) (the “Draft Network Data Security Regulations”).
The Draft Internet Data Security Regulations cover a wide range of internet data security issues, including the supervision and management
of data security in the PRC, and apply to situations using networks to carry out data processing activities. The Draft Network Data Security
Regulations set out general guidelines covering subjects including protection of personal information, security of important data, security
management of cross-border data transmission, obligations of internet platform operators, supervision and management, and legal liabilities
of internet data security. The Draft Network Data Security Regulations also require a data processor to apply to the CAC for cybersecurity
review if it process the personal information of more than one million individuals and goes listing in foreign countries. As of the date
of this Annual Report, the Draft Network Data Security Regulations were released for public comment only, and the provisions and anticipated
adoption or effective date may be subject to change with substantial uncertainty.

REGULATIONS RELATING TO PRIVACY PROTECTION

The Civil Code of the PRC, issued by the National
People’s Congress of the PRC on May 28, 2020 and effective from January 1, 2021, provides legal basis for privacy and personal information
infringement claims under the Chinese civil laws.

Criminal Law of the PRC, as amended on December
26, 2020, prohibits institutions, companies and their employees from selling or otherwise illegally disclosing a citizen’s personal