Simpson Thacher & Bartlett
Division of Corporation Finance
U.S. Securities and Exchange Commission
10. | In light of recent events indicating greater oversight by the Cyberspace Administration of China (CAC) over data security, particularly for companies seeking to list on a foreign exchange, please revise your disclosure to explain how this oversight impacts your business and your offering and to what extent you believe that you are compliant with the regulations or policies that have been issued by the CAC to date. |
The Company respectfully advises the Staff that it included the following statements on page 20 of the Annual Report: “As of the date of this annual report, we have not been informed by any PRC governmental authority of any requirement that we shall apply for approval or filings for our initial public offering in the U.S. in August 2020, our follow-on public offering completed in December 2020 or our listing on the Hong Kong Stock Exchange and the associated public offering in July 2021. However, we are not certain whether the Revised Cybersecurity Review Measures or any relevant future laws, rules or regulations will apply to our company and follow-on offerings of foreign listed companies, or whether the scope of financing activities that are subject to the cybersecurity review may change in the future. Further, we may become subject to enhanced cybersecurity review, or regulatory bodies in China may retroactively apply and implement the Revised Cybersecurity Review Measures or other new laws, rules or regulations, including conducting a cybersecurity review over our company in connection with our initial public offering in the U.S. or follow-on public offering.”
The Company further respectfully advises the Staff that it included the following statement on page 21 of the Annual Report: “We have incurred, and will continue to incur, significant expenses in an effort to comply with privacy, data protection, cybersecurity and information security related laws, regulations, standards and protocols, especially as a result of such newly promulgated laws and regulations. […] Any failure or perceived failure to comply with applicable laws, regulations or policies may result in inquiries or other proceedings being instituted against, or other lawsuits, decisions or sanctions being imposed on us by governmental authorities, users, consumers or other parties, including but not limited to warnings, fines, directions for rectifications, suspension of the related business and termination of our applications, as well as in negative publicity on us and damage to our reputation, any of which could have a material adverse effect on our business, results of operations, financial condition and prospects.”
The Company proposes to add the following disclosure to its future annual report on Form 20-F:
We believe that the Group has complied with the applicable regulations and policies that have been issued by the Cybersecurity Administration of China, or CAC, to date in all material respects. As of the date of this annual report, the Group has not been involved in any cybersecurity review initiated by the CAC, and the Group has not received any inquiry, notice, warning, or sanction in such respect.
* * * * *
12