We face risks related to complying with applicable laws, rules and regulations relating to the collection, use, disclosure and security of personal information, as well as any requests from regulatory and government authorities relating to such data.
The PRC regulatory and enforcement regime with regard to data security and data protection has continued to evolve. There are uncertainties on how certain laws and regulations will be implemented in practice. PRC regulators have been increasingly focused on regulating data security and data protection. We expect that these areas will receive greater attention from regulators, as well as attract public scrutiny and attention going forward. This greater attention, scrutiny and enforcement, including more frequent inspections, could increase our compliance costs and subject us to heightened risks and challenges associated with data security and protection. For example, the PRC Data Security Law, which was promulgated by the Standing Committee of the National People's Congress on June 10, 2021, and certain other rules and regulations (i.e. the Regulations on the Protection of the Security of Critical Information Infrastructure, which became effective on September 1, 2021) impose data security and privacy obligation on entities involved in data activities, which may vary based upon the importance of data and the harm it may cause. We mainly engage in logistics and ancillary business and our business operation generally involve data related to logistics business operation. Such data have not been specifically categorized as important data or core data as by the PRC Data Security Law. As of the date of this annual report, we are not the operator of critical information infrastructure under the Regulations on the Protection of the Security of Critical Information Infrastructure. We believe that the PRC Data Security Law would not impose any substantial difficulties on us. However, we could not rule out the possibility that our data may be deemed as important data/core data or we may be deemed to be a critical information infrastructure operator, which would subject us to additional supervisory requirements. Any incompliance on such additional supervisory requirements may subject us to fines, order to rectify, suspension of users registration, revocation of business certificate and other penalties, which may have material adverse effect on our business, operations and financial condition as well as the price of our securities. For further details please see "Item 4. Information on the Company-B. Business Overview-Regulatory Matters-Regulations Relating to Internet Information Security and Privacy Protection."
In addition, we could become subject to enhanced cybersecurity review or investigations launched by PRC regulators in the future. The PRC Data Security Law provides that the state shall establish a data security review mechanism on data processing activities that do or may affect national security. Cybersecurity Review is conducted by an office under the Cyberspace Administration of China, or the CAC, pursuant to the Cybersecurity Review Measures, which became effective on June 1, 2020. Any failure or delay in the completion of the cybersecurity review procedures or any other non-compliance with the cybersecurity related laws and regulations may result in fines or other penalties, including suspension of business, website closure, removal of app from the relevant app stores, and revocation of prerequisite licenses, as well as reputational damage or legal proceedings or actions against us, which may have material adverse effect on our business, financial condition or results of operations. On December 28, 2021, the CAC, the NDRC, the SAMR, the MIIT and certain other PRC governmental authorities, jointly released the revised Cybersecurity Review Measures, which took effect on February 15, 2022. The revised Cybersecurity Review Measures provides that operators of critical information infrastructure that intend to purchase network products and services that affect or may affect national security shall file for cybersecurity review with the Cybersecurity Review Office under the CAC. As of the date of this annual report, we have not been informed by any PRC governmental authority of any requirement that we file for a cybersecurity review. We have not been involved in any investigations on cybersecurity review initiated by the CAC or other competent authorities nor do we expect that current PRC laws on cybersecurity or data security would have a material adverse impact on our business operations, and we have not received any inquiry, notice, warning, or sanction in such respect. However, the scope of network products or data processing activities that affect or may affect national security is still unclear, and there remains significant uncertainty in the interpretation and enforcement of relevant PRC cybersecurity laws and regulations. For further details please see "Item 4. Information on the Company-B. Business Overview-Regulatory Matters-Regulations Relating to Internet Information Security and Privacy Protection."
On August 20, 2021, the Standing Committee of the National People's Congress of China promulgated the Personal Information Protection Law, which integrates the scattered rules with respect to personal information rights and privacy protection and took effect on November 1, 2021. The Personal Information Protection Law sets forth detailed rules on processing personal information, clarifies the relevant rights of the individuals and the obligations of the personal information processors, and further strengthens the liabilities for illegal process of personal information. We do not collect any sensitive personal information or other excessive personal information that is not related to the corresponding business services. We update our privacy policies from time to time to meet the latest regulatory requirements of the CAC and other authorities and adopt technical measures to protect data and ensure cybersecurity in a systematic way. Nonetheless, the Personal Information Protection Law raises the protection requirements for processing personal information, and many specific requirements of the Personal Information Protection Law remain to be clarified by the CAC, other regulatory authorities, and courts in practice. We may be required to make further adjustments to our business practices to comply with the personal information protection laws and regulations. For further details please see "Item 4. Information on the Company-B. Business Overview-Regulatory Matters-Regulations Relating to Internet Information Security and Privacy Protection."
We believe that we are in compliance with the regulations and policies that have been issued by the CAC and other competent PRC regulatory authorities on cybersecurity as of the date of this annual report. However, as uncertainties remain regarding the interpretation and implementation of applicable PRC laws and regulations, we cannot assure you that we will comply with such laws and regulations in all respects and we may be ordered to rectify or terminate any actions that are deemed illegal by regulatory authorities. We may also become subject to fines and/or other sanctions which may have material adverse effect on our business, operations and financial condition as well as price of our securities. If we are unable to manage these risks, our reputation and results of operations could be materially and adversely affected. For further details please see "Item 4. Information on the Company-B. Business Overview-Regulatory Matters-Regulations Relating to Internet Information Security and Privacy Protection."
We also grant limited access to specified data on our technology platform to certain other ecosystem participants. These third parties face the same challenges and risks inherent in handling and protecting large volumes of data. Any system failure or security breach or lapse on our part or on the part of any of such third parties that results in the release of user data could harm our reputation and brand and, consequently, our business, in addition to exposing us to potential legal liability.
In addition, we are subject to additional laws in other jurisdictions in which we operate and where our ecosystem participants are located. The laws, rules and regulations of other jurisdictions, such as the U.S., Europe and Southeast Asian countries, may impose more stringent or conflicting requirements and penalties than those in China, compliance with which could require significant resources and costs. Our policies and practices concerning the collection, use and disclosure of user data are posted on our websites. Any failure, or perceived failure, by us to comply with any regulatory requirements or privacy protection-related laws, rules and regulations could result in proceedings or actions against us by governmental entities or others. These proceedings or actions could subject us to significant penalties and negative publicity, require us to change our business practices, increase our costs and severely disrupt our business.