On February 24, 2023, the CSRC, together with Ministry of Finance of the PRC, National Administration of State Secrets Protection and National Archives Administration of China, revised the Provisions on Strengthening Confidentiality and Archives Administration for Overseas Securities Offering and Listing which was issued by the CSRC, National Administration of State Secrets Protection and National Archives Administration of China in 2009, or the Provisions. The revised Provisions is issued under the title the Provisions on Strengthening Confidentiality and Archives Administration of Overseas Securities Offering and Listing by Domestic Companies, and has come into effect on March 31, 2023 together with the Trial Measures. One of the major revisions to the revised Provisions is expanding its application to cover indirect overseas offering and listing, as is consistent with the Trial Measures. The revised Provisions require that, including but not limited to (a) a domestic company that plans to, either directly or indirectly through its overseas listed entity, publicly disclose or provide to relevant individuals or entities including securities companies, securities service providers and overseas regulators, any documents and materials that contain state secrets or working secrets of government agencies, shall first obtain approval from competent authorities according to law, and file with the secrecy administrative department at the same level; and (b) domestic company that plans to, either directly or indirectly through its overseas listed entity, publicly disclose or provide to relevant individuals and entities including securities companies, securities service providers and overseas regulators, any other documents and materials that, if leaked, will be detrimental to national security or public interest, shall strictly fulfill relevant procedures stipulated by applicable national regulations. On or after March 31, 2023, any failure or perceived failure by the Company or PRC subsidiaries to comply with the above confidentiality and archives administration requirements under the revised Provisions and other PRC laws and regulations may result in that the relevant entities would be held legally liable by competent authorities, and referred to the judicial organ to be investigated for criminal liability if suspected of committing a crime.
Regulations Relating to Dividend Distributions
According to the PRC Company Law and Foreign Investment Law, each of our PRC subsidiaries, as a foreign invested enterprise, or FIE, is required to draw 10% of its after-tax profits each year, if any, to fund a common reserve, and which may stop
drawing its after-tax profits if the aggregate balance of the common reserve has already accounted for over 50% of its registered capital. These reserves are not distributable as cash dividends. Furthermore, under the EIT Law, which became effective in January 2008, the maximum tax rate for the withholding tax imposed on dividend payments from PRC foreign invested companies to their overseas investors that are not regarded as “resident” for tax purposes is 20%. The rate was reduced to 10% under the Implementing Regulations for the EIT Law issued by the State Council. However, a lower withholding tax rate might be applied if there is a tax treaty between China and the jurisdiction of the foreign holding companies, such as tax rate of 5% in the case of Hong Kong companies that holds at least 25% of the equity interests in the foreign-invested enterprise, and certain requirements specified by PRC tax authorities are satisfied.
Pursuant to the Notice on Improving the Check of Authenticity and Compliance to Further Promote Foreign Exchange Control promulgated by SAFE in January 2017, which stipulates several capital control measures with respect to outbound remittance of profits from domestic entities to offshore entities, including the following: (1) under the principle of genuine transaction, banks shall check board resolutions regarding profit distributions, the original version of tax filing records and audited financial statements; and (2) domestic entities shall hold income to account for previous years’ losses before remitting the profits. Moreover, domestic entities shall make detailed explanations of sources of capital and utilization arrangements, and provide board resolutions, contracts and other proof when completing the registration procedures in connection with an outbound investment.
Regulations in relation to Cyber Security and Data Protection
On November 7, 2016, the Standing Committee of the National People’s Congress (the “SCNPC”) promulgated the Cyber Security Law of the PRC, or Cyber Security Law, which became effective on June 1, 2017. The Cyber Security Law requires network operators to perform certain functions related to cyber security protection and strengthen the network information management. On June 10, 2021, the SCNPC promulgated the Data Security Law of the PRC, or the PRC Data Security Law, which became effective on September 1, 2021. Pursuant to the PRC Data Security Law, data refers to any record of information in electronic or any other form and data processing including the collection, storage, use, processing, transmission, provision, and public disclosure of data.
On December 28, 2021, the Cyberspace Administration of China, or the CAC, jointly with other twelve PRC governmental authorities, promulgated the Measures for Cybersecurity Review, or Cybersecurity Measures, which became effective on February 15, 2022. the Cybersecurity Measures provides that, among other things, (i) online platform operators possessing personal information of more than one million users must apply to the Cybersecurity Review Office for a cybersecurity review before conducting any listing in a foreign country, (ii) the purchase of network products and services of a critical information infrastructure operator and data processing activities of an online platform operator that affect or may affect national security shall be subject to the cybersecurity review, and (iii) the relevant governmental authorities in the PRC may initiate cyber security review if such governmental authorities determine any network products and services and data processing activities affect or may affect national security.
On November 14, 2021, the CAC promulgated the Regulations on the Administration of Cyber Data Security (Draft for Comments), or Draft Cyber Data Regulations. In accordance with relevant PRC regulations, apply for cybersecurity review when carrying out the following activities: (i) the merger, reorganization or separation of online platform operators that have acquired a large number of data resources related to national security, economic development or public interests, which affects or may affect national security; (ii) processing personal information of more than one million individuals and seeking a listing in a foreign country; (iii) applying for listing in Hong Kong, which affects or may affect national security; and (iv) other data processing activities that affect or may affect national security. As at the date of this annual report, the Draft Cyber Data Regulations are still in draft form and subject to change with substantially uncertainty.
55