We are subject to various risks and costs associated with the collection, use, sharing, retention, security, and transfer of confidential and private information, such as personal information and other data. This data is wide ranging and relates to our investors, employees, contractors and other counterparties and third parties. Our compliance obligations include those relating to the Data Protection Act (As Revised) of the Cayman Islands and the relevant PRC laws in this regard. These PRC laws apply not only to third-party transactions, but also to transfers of information between us and our subsidiaries, and other parties with which we have commercial relations. We do not believe the PRC laws have a material impact on our current operations, but these laws continue to develop, and the PRC government may adopt other rules and restrictions in the future. Non-compliance could result in penalties or other significant legal liabilities.
Pursuant to the PRC Cybersecurity Law, personal information and important data collected and generated by a critical information infrastructure operator in the course of its operations in China must be stored in China, and if a critical information infrastructure operator purchases internet products and services that affects or may affect national security, it should be subject to cybersecurity review by the CAC. The Revised Cybersecurity Review Measures, which took effect on February 15, 2022, require critical information infrastructure operators procuring network products and services and online platform operators carrying out data processing activities, which affect or may affect national security, to conduct a cybersecurity review pursuant to the provisions therein. We do not believe that our company constitutes a "critical information infrastructure operator" under the Cybersecurity Review Measures, however, the exact scope of "critical information infrastructure operators" under the current regulatory regime remains unclear, and the PRC government authorities may have wide discretion in the interpretation and enforcement of the applicable laws. Additionally, the PRC Data Security Law took effect on September 1, 2021 and requires data collection to be conducted in a legitimate and proper manner, and stipulates that, for the purpose of data protection, data processing activities must be conducted based on data classification and hierarchical protection system for data security.
We believe we are compliant with these regulations, to the extent they are applicable to us, and we do not believe our business will be materially affected by these measures. However, if we were selected for review, or one of our suppliers was selected for review, we or such supplier may be required to suspend operations in China during such review. Cybersecurity review could also result in negative publicity with respect to our company or our suppliers and could divert managerial attention and financial resources. Furthermore, if we or one of our suppliers were found to be in violation of applicable laws and regulations in China during such review, we or such supplier could be subject to administrative penalties, such as warnings, fines, or service suspension.
Pursuant to the PRC Cybersecurity Law, which was promulgated by the Standing Committee of the National People's Congress on November 7, 2016 and took effect on June 1, 2017, personal information and important data collected and generated by a critical information infrastructure operator in the course of its operations in China must be stored in China, and if a critical information infrastructure operator purchases internet products and services that affects or may affect national security, it should be subject to cybersecurity review by the CAC. Due to the lack of further interpretations, the exact scope of "critical information infrastructure operator" remains unclear. On July 10, 2021, the CAC publicly issued the Measures for Cybersecurity Censorship (Revised Draft for Comments) aiming to, upon its enactment, replace the existing Measures for Cybersecurity Censorship. The draft measures extend the scope of cybersecurity reviews to data processing operators engaging in data processing activities that affect or may affect national security, including listing in a foreign country. PRC Data Security Law, which was promulgated by the Standing Committee of the National People's Congress on June 10, 2021 and took effect on September 1, 2021, requires data collection to be conducted in a legitimate and proper manner, and stipulates that, for the purpose of data protection, data processing activities must be conducted based on data classification and hierarchical protection system for data security.
We believe we are compliant with these regulations, to the extent they are applicable to us, and we do not believe our business would be materially affected by these recent measures. However, if we were selected for review, or one of our suppliers was selected for review, we or such supplier may be required to suspend operations in China during such review. Cybersecurity review could also result in negative publicity with respect to our company or our suppliers and could divert managerial attention and financial resources. Furthermore, if we or one of our suppliers were found to be in violation of applicable laws and regulations in China during such review, we or such supplier could be subject to administrative penalties, such as warnings, fines, or service suspension.