when performing its personal information protection duties: 1. Questioning any party concerned to investigate any circumstance related to an activity of processing of personal information; 2. Accessing and making copies of any contract, record, account book or any other relevant material of a party concerned that is related to an activity of processing of personal information; 3. Conducting an on-site inspection to investigate any suspected illegal activity of processing of personal information; and 4. Checking any equipment or item related to an activity of processing of personal information, which may be seized or confiscated subject to reporting in writing to and approval by a head of the authority if there is evidence proving that such equipment or item is involved in an illegal activity of processing of personal information. Any party concerned shall assist and cooperate with, and may not deny or obstruct, the performance of their duties in accordance with the law by authorities performing personal information protection duties. Article 64 For any considerable risk found in an activity of processing of personal information or any personal information security incident found with a personal information processor by an authority performing personal information protection duties in the course of performing its duties, the authority may, in accordance with its authority and the procedure as prescribed, conduct a talk with the legal representative or a head of the personal information processor, or require the personal information processor to have its/his/her activities of processing of personal information audited by a professional institution. The personal information processor shall adopt measures to rectify and eliminate any hazard as required. In the case of any illegal processing of personal information that is suspected of being a criminal offense as discovered by an authority performing personal information protection duties in the course of performing its duties, the authority shall refer the case to a public authority for legal handling. Article 65 Any organization or individual shall have the right to file a complaint or report about any illegal activity of processing of personal information with an authority performing personal information protection duties. The authority receiving such a complaint or report shall handle it in a timely manner and in accordance with the law, and notify the person filing the complaint or report of the result. Authorities performing personal information protection duties shall make their contact information publicly available to receive complaints and reports. Chapter VII Legal Liability Article 66 Anyone processing personal information in violation of this Law or failing to perform any obligation of personal information protection specified in this Law in the processing of personal information will be ordered to make a correction, given a warning, and confiscated of any illegal gain by the authorities performing personal information protection duties, and any application program that illegally processes personal information will be ordered to suspend or terminate its services; and if the required correction is not made, a fine of up to CNY1 million will be imposed on the violator; and any person in charge or any other individual directly liable for the violation will be fined between CNY10,000 and CNY100,000. If the illegal activity specified in the preceding paragraph is of a grave nature, the violator will be ordered to make a correction, confiscated of any illegal again, and fined up to CNY50 million, or 5% of last year's annual revenue by the authorities performing personal information protection duties at the provincial level or above; and may also be ordered to suspend any related activity or to suspend business for rectification, and/or be reported to the relevant authority for the revocation of the related business permit or the business license; and any person in charge or any other individual direclty liable for the violation will be fined between CNY100,000 and CNY1 million and may also be banned for a certain period of time from serving as a director, supervisor, senior officer or personal information protection officer of a relevant enterprise. Article 67 Any illegal activity specified in this Law if committed shall be entered into credit files in accordance 11