Due to the increasing popularity and use of the Internet and other online services, it is possible that a number of laws and regulations may be adopted with respect to the Internet or other online services covering issues such as user privacy, pricing, content, copyrights, distribution, antitrust and characteristics and quality of products and services. The adoption of additional laws or regulations may impede the growth of the Internet or other online services, which could, in turn, decrease the demand for our content and services and increase our cost of doing business. Moreover, the applicability to the Internet and other online services of existing laws in various jurisdictions governing issues such as property ownership, sales and other taxes, libel and personal privacy is uncertain and may take years to resolve. Any new legislation or regulation, the application of laws and regulations from jurisdictions whose laws do not currently apply to our business, or the application of existing laws and regulations to the Internet and other online services could significantly disrupt our operations or subject us to penalties.
In addition, the PRC regulatory authorities have taken steps to strengthen the regulation on cybersecurity and data protection. On June 10, 2021, the Standing Committee of the National People’s Congress promulgated the PRC Data Security Law, effective on September 1, 2021. On August 20, 2021, the Standing Committee of the National People’s Congress promulgated the PRC Personal Information Protection Law, which has become effective on November 1, 2021. On December 28, 2021, the CAC published the Revised Cybersecurity Review Measures, effective on February 15, 2022 and repealed the Cybersecurity Review Measures promulgated on April 13, 2020. Such Measures further restate and expand the applicable scope of the cybersecurity review. Pursuant to the Cybersecurity Review Measures, critical information infrastructure operators that procure internet products and services, and network platform operators engaging in data processing activities, must be subject to the cybersecurity review if their activities affect or may affect national security. In addition, network platform operators holding over one million users’ personal information shall apply with the Cybersecurity Review Office for a cybersecurity review before conducting any public offering in a foreign country. On July 30, 2021, the state council promulgated the Regulations on Protection of Critical Information Infrastructure, which became effective on September 1, 2021. On December 31, 2021, the CAC published the Administrative Provisions on Internet Information Service Algorithm Recommendation on its website, effective on March 1, 2022. These newly promulgated laws and regulations reflect PRC government further attempts to strengthen the legal protection for the national network security, data security, the security of key information infrastructure and the security of personal information protection. See “Item 4. Information on the Company—4.B. Business Overview—Regulation— Regulation on Cybersecurity and Censorship” for details on regulations over data protection and privacy in the PRC.
We have been taking and will continue to take reasonable measures to comply with such laws, regulations, announcement, provisions and inspection requirements; however, as such laws, regulations, announcement and provisions are relatively new, it remains uncertain how these announcements and provisions will be implemented. We cannot assure you we can adapt our operations to it in a timely manner. Evolving interpretations of such laws, regulations, announcements and provisions or any future regulatory changes might impose additional restrictions on us generating and processing personal and behavioral data. We may be subject to additional regulations, laws and policies adopted by the PRC government to apply more stringent social and ethical standards in data privacy resulting from the increased global focus on this area. To the extent that we need to alter our business model or practices to adapt to these announcement and provisions and future regulations, laws and policies, we could incur additional expenses.
The interpretation and application of existing PRC laws, regulations and policies, the stated positions of relevant PRC government authorities and possible new laws, regulations or policies have created substantial uncertainties regarding the legality of existing and future foreign investments in, and the businesses and activities of, Internet businesses in China, including our business. In addition, the direct shareholders of the VIE are PRC incorporated entities rather than PRC individuals. Therefore, the upward ownership structure and ultimate beneficial parties of such shareholders may vary from time to time, and we or the VIE may not be informed or aware of such variations. If any such change results in direct or indirect foreign stake in any of the shareholders of the VIE, the VIE may not be eligible for maintaining certain existing licenses to operate business where foreign investment is prohibited or restricted.
Lack of Internet news information license may expose us to administrative sanctions, which would materially and adversely affect our business, results of operations and financial condition.
The PRC government regulates the Internet industry extensively, including foreign ownership of, and the licensing requirements pertaining to, companies in the Internet industry. A number of regulatory agencies, including the Ministry of Culture and Tourism, or the MOCT, the Ministry of Industry and Information Technology, or the MIIT, the Cyberspace Administration of China, or CAC, the National Radio and Television Administration, or the NRTA (previously known as the State Administration of Press Publication, Radio, Film and Television, or the SAPPRFT) , the State Council Information Office, or the SCIO, and other governmental authorities, jointly regulate all major aspects of the Internet industry. Operators are required to obtain various government approvals and licenses prior to providing the relevant Internet information services.