Article 64 Where, in violation of the third paragraph of Article 22 or Article 41, 42 or 43 of the Law, a network operator or provider of any cyber product or service commits an infringement of any personal information right that is legally protected, the competent authority shall order it to make rectification, and may, depending on the circumstances of the case, impose on it separately or combined, a warning, the confiscation of illegal gains, and a fine of between one and ten times the illegal gains, or a fine of up to CNY1 million if there is no illegal gain; impose a fine of between CNY10,000 and CNY100,000 on any directly liable manager or any other directly liable person of the organization; and may, if the circumstances are serious, order it to suspend the relevant business, suspend business for rectification, or close down the website, or revoke its relevant business permit or its business license. In the case of a theft of or otherwise illegal acquisition, or illegal sale or illegal provision of personal information to another in violation of Article 44 of the Law that does not constitute a criminal offense, the person committing the violation shall be confiscated of the illegal gains and subject to a fine of between one and ten times the illegal gains or a fine of up to CNY1 million if there are no illegal gains by the public security. Article 65 Where operators of critical information infrastructures, in violation of Article 35 hereof, use network products or services that have neither been examined for security nor passed the security examination, they shall be ordered by the relevant competent departments to stop using such products or services, and a fine of no less than one but no more than ten times the purchase amount shall be imposed; as for the persons directly in charge or other directly responsible persons, a fine of no less than CNY10,000 but no more than CNY100,000 shall be imposed. Article 66 Operators of critical information infrastructures who, in violation of Article 37 hereof, store network data overseas, or provide network data overseas, the relevant competent departments shall order them to effect rectification, give a warning, confiscate illegal gains, and impose a fine of no less than CNY50,000 but no more than CNY500,000; and may order them to suspend relevant business, stop business for rectification, close down the website, or revoke the relevant business permits or their business licenses; as for the persons directly in charge or other directly responsible persons, a fine of no less than CNY10,000 but no more than CNY100,000 shall be imposed. Article 67 For network operators who violate Article 46 hereof by creating a website or setting up a communications group for illegal or criminal activities, or disclosing information by making use of the network that relates to any illegal or criminal activity to be committed, if such activities do not constitute a crime, public security organs shall put them into detention for up to five days and may, in addition, impose a fine of no less than CNY10,000 but no more than CNY100,000; and if the circumstances are serious, such operators shall be detained for no less than 5 days but no more than 15 days and may, in addition, be fined no less than CNY50,000 but no more than CNY500,000. Websites and communication groups used for conducting illegal and criminal activities shall be closed down. Where an entity commits any of the violations stipulated in the preceding paragraph, public security organs shall confiscate its illegal gains, impose a fine of no less than CNY100,000 but no more than CNY500,000, and punish the persons directly in charge and the other directly responsible persons in accordance with the provisions of the preceding paragraph. Article 68 Network operators, who, in violation of Article 47 hereof, fail to stop transmitting or take disposal measures to remove the information, or save relevant records regarding information that the relevant departments prohibit from being published or transmitted, they shall be ordered to effect rectification and be given a warning, and their illegal gains shall be confiscated by the relevant competent departments; where the operators refuse to effect rectification or the circumstances are serious, a fine of no less than CNY100,000 but no more than CNY500,000 shall be imposed, and they may be ordered to suspend relevant business, stop business for rectification or close down the website, and the relevant business permits or their business licenses may be revoked; as for the persons directly in charge and other directly responsible 11

Select target paragraph3