Company: AEHL
Filing Date: 2025-08-05
Form Type: 20-F/A
Source: 0001641172-25-022290
Chunk: 34

Company: Antelope Enterprise Holdings Ltd
Filing Date: 2025-08-05
Form: 20-F/A
Chunk 34
---
 the personal information of more than 100,000
individuals in aggregate or has provided the sensitive personal information of more than 10,000 individuals in aggregate since January
1 of last year; and (iv) other circumstances where the security assessment is required as prescribed by the CAC. A data processor shall,
before applying for the security assessment of an outbound data transfer, conduct a self-assessment of the risks in the outbound data
transfer. The security assessment of a cross-border data transfer shall focus on assessing risks that may be brought about by the cross-border
data transfer to national security, public interests, or the lawful rights and interests of individuals or organizations.

On December 28, 2021, the CAC,
the NDRC, the MIIT and several other PRC governmental authorities jointly issued the Cybersecurity Review Measures, which became effective
on February 15, 2022 and replaced the Measures for Cybersecurity Review published on April 13, 2020. Pursuant to Cybersecurity Review
Measures, critical information infrastructure operators that purchase network products and services and network platform operators engaging
in data processing activities that affect or may affect national security are subject to cybersecurity review under the Cybersecurity
Review Measures. According to the Cybersecurity Review Measures, before purchasing any network products or services, a critical information
infrastructure operator shall assess potential national security risks that may arise from the launch or use of such products or services,
and apply for a cybersecurity review with the cybersecurity review office of CAC if national security will or may be affected. In addition,
network platform operators who possess personal information of more than one million users and intend to be listed at a foreign stock
exchange shall go through the cybersecurity review. As advised by our PRC counsel, Sichuan Jindouyun Law Firm, we are not subject to cybersecurity
review with the CAC in accordance with the CAC Revised Measures, because (i) we are not in possession of or otherwise holding personal
information of over one million users and it is also very unlikely that it will reach such threshold in the near future; (ii) as of the
date of this annual report, our data processing activities (including the collection, storage, usage, transmission and publicity of data)
do not damage national security; and (iii) as of the date of this annual report, we have not received any notice or determination from
applicable PRC governmental authorities identifying it as a critical information infrastructure operator. However, since these statements
and regulatory actions