Tdh Holdings (PETZ) Risk Analysis

Foreign enterprises that engage in M&A activities inside and outside China are subject to different regulatory limitations under Chinese laws and regulations. The key regulations governing such activities within PRC are Wholly Foreign-Owned Enterprise Law, the Interim Provisions on the Domestic Investment of Foreign-Funded Enterprise, the Catalogue for the Guidance of Foreign Investment Industries (amended in 2017) and other relevant Chinese laws and regulations. Under these laws and regulations, conducting M&A in China requires that Tiandihui and Qingdao Tiandihui Pet Foodstuffs Co., Ltd are wholly foreign-owned enterprises "WFOE" be profitable, and a timely application with and approval by of local regulatory agencies of any proposed M&A transaction. The M&A activities outside the PRC are governed by several rules and regulations, including PRC Administrative Measures on Offshore Investment, the Regulation on Foreign Exchange Administration of the PRC, the Notice of the State Administration of Foreign Exchange on Issuing the Provisions on the Foreign Exchange Administration of the Overseas Direct Investment of Domestic Institutions, the Circular on Relevant Issues Concerning Foreign Exchange Control on Domestic Resident's Financing and Round-trip Investment Through Offshore Special Purpose Vehicles. Under these laws and regulations, our WFOE must get approval from the PRC Ministry of Commerce or its branch offices for any proposed offshore M&A transaction, and complete its foreign exchange registration. We cannot offer any assurance that in the event we seek such approvals or registrations we will be able to secure them in a timely fashion or will be able to receive them at all; negative feedback from the regulatory agencies or our failure to register such proposed transactions may have material adverse impact on our business expansion and could materially affect our business operation and finance condition. In addition, since approval and/or registration procedures required time to complete, these processes may cause additional delays to our onshore or offshore M&A projects, which, in turn, may have adverse impact on our business and operations.

Under the laws of the British Virgin Islands, the rights of minority shareholders are protected by provisions of the BVI Act dealing with shareholder remedies and other remedies available under common law (in tort or contractual remedies). The principal protection under statutory law is that shareholders may bring an action to enforce the constitutional documents of the company (i.e. the memorandum and articles of association) as shareholders are entitled to have the affairs of the company conducted in accordance with the BVI Act and the memorandum and articles of association of the company. A shareholder may also bring an action under statute if he feels that the affairs of the company have been or will be carried out in a manner that is unfairly prejudicial or discriminating or oppressive to him. The BVI Act also provides for certain other protections for minority shareholders, including in respect of investigation of the company and inspection of the company books and records. There are also common law rights for the protection of shareholders that may be invoked, largely dependent on English common law, since the common law of the British Virgin Islands for business companies is limited.

The PRC legal system is a codified legal system made up of written laws, regulations, circulars, administrative directives and internal guidelines. Unlike common law jurisdictions such as the U.S., decided cases (which may be taken as reference) do not form part of the legal structure of the PRC and thus have no binding effect. Furthermore, in line with its transformation from a centrally planned economy to a more market-oriented economy, the PRC government is still in the process of developing a comprehensive set of laws and regulations. As the legal system in the PRC is still evolving, laws and regulations or their interpretation may be subject to further changes. Such uncertainty and prospective changes to the PRC legal system could adversely affect our results of operations and financial condition.

On May 20, 2020, the U.S. Senate passed the HFCA Act requiring a foreign company to certify it is not owned or controlled by a foreign government if the PCAOB is unable to audit specified reports because the company uses a foreign auditor not subject to PCAOB inspection. If the PCAOB is unable to inspect the company's auditors for three consecutive years, the issuer's securities are prohibited to trade on a national exchange. On December 2, 2020, the U.S. House of Representatives approved the HFCA Act. On December 18, 2020, the HFCA Act was signed into law. On March 24, 2021, the SEC adopted interim final rules relating to the implementation of certain disclosure and documentation requirements of the HFCA Act. A company will be required to comply with these rules if the SEC identifies it as having a "non-inspection" year under a process to be subsequently established by the SEC. The SEC is assessing how to implement other requirements of the HFCA Act, including the listing and trading prohibition requirements described above. Furthermore, on June 22, 2021, the U.S. Senate passed the AHFCAA, which, if signed into law, would amend the HFCA Act and require the SEC to prohibit an issuer's securities from trading on any U.S. stock exchanges if its auditor is not subject to PCAOB inspections for two consecutive years instead of three consecutive years. On September 22, 2021, the PCAOB adopted a final rule implementing the HFCAA, which provides a framework for the PCAOB to use when determining, as contemplated under the HFCA Act, whether the PCAOB is unable to inspect or investigate completely registered public accounting firms located in a foreign jurisdiction because of a position taken by one or more authorities in that jurisdiction. Furthermore, on June 22, 2021, the U.S. Senate passed the AHFCAA, which, if signed into law, would amend the HFCA Act and require the SEC to prohibit an issuer's securities from trading on any U.S. stock exchanges if its auditor is not subject to PCAOB inspections for two consecutive years instead of three consecutive years. On December 16, 2021, the PCAOB issued a Determination Report which found that the PCAOB is unable to inspect or investigate completely registered public accounting firms headquartered in: (1) mainland China and (2) Hong Kong. Our auditor is headquartered in California and is not subject to this determination announced by the PCAOB. Our auditor, the independent registered public accounting firm that issues the audit report for the year ended December 31, 2023 included elsewhere in this annual report, as an auditor of companies that are traded publicly in the United States and a firm registered with the PCAOB, is subject to laws in the United States pursuant to which the PCAOB conducts regular inspections to assess its compliance with the applicable professional standards. Our auditor is headquartered in California and was last inspected by the PCAOB in March 2023. According to our auditor, the PCAOB will conduct regular inspections. The recent developments would add uncertainties to our listing and we cannot assure you whether the Nasdaq Capital Market or regulatory authorities would apply additional and more stringent criteria to us after considering the effectiveness of our auditor's audit procedures and quality control procedures, adequacy of personnel and training, or sufficiency of resources, geographic reach, or experience as it relates to our audit. Furthermore, the HFCA Act, which requires that the PCAOB be permitted to inspect the issuer's public accounting firm within three years, may result in the delisting of our Company in the future if the PCAOB is unable to inspect our accounting firm at such future time. Our management team has limited experience in managing a U.S. public company and complying with laws applicable to such company, the failure of which may adversely affect our business, financial conditions and results of operations. Our current management team has limited experience in managing a U.S. publicly traded company, interacting with public company investors and complying with the increasingly complex laws pertaining to U.S. public companies. Prior to the completion of our initial public offering, we mainly operated our businesses as a private company in the PRC. As a result of our IPO, our company became subject to significant regulatory oversight and reporting obligations under the federal securities laws and the scrutiny of securities analysts and investors, and our management currently has no experience in complying with such laws, regulations and obligations. Our management team may not successfully or efficiently manage our transition to becoming a U.S. public company. These new obligations and constituents will require significant attention from our senior management and could divert their attention away from the day-to-day management of our business, which could adversely affect our business, financial conditions and results of operations.

On July 6, 2021, the General Office of the Communist Party of China Central Committee and the General Office of the State Council jointly issued a document to crack down on illegal activities in the securities market and promote the high-quality development of the capital market, which, among other things, requires the relevant governmental authorities to strengthen cross-border oversight of law-enforcement and judicial cooperation, to enhance supervision over China-based companies listed overseas, and to establish and improve the system of extraterritorial application of the PRC securities laws. Since this document is relatively new, uncertainties still exist in relation to how soon legislative or administrative regulation making bodies will respond and what existing or new laws or regulations or detailed implementations and interpretations will be modified or promulgated, if any, and the potential impact such modified or new laws and regulations will have on our future business, results of operations, and the value of our securities. Further, Chinese government continues to exert more oversight and control over Chinese technology firms. On July 2, 2021, Chinese cybersecurity regulator announced, that it had begun an investigation of Didi Global Inc. (NYSE: DIDI) and two days later ordered that the company's application be removed from smartphone application stores. On July 5, 2021, the Chinese cybersecurity regulator launched the same investigation on two other Internet platforms, China's Full Truck Alliance of Full Truck Alliance Co. Ltd. (NYSE: YMM) and Boss of KANZHUN LIMITED (Nasdaq: BZ). Therefore, CSRC and other Chinese government agencies may exert more oversight and control over offerings that are conducted overseas and foreign investment in China-based issuers, especially those in the technology field. As of the date of this annual report, we have not received any requirement to obtain approval of CSRC to list on U.S. exchanges. Further, however, given the current regulatory environment in the PRC, we and our PRC subsidiaries are still subject to the uncertainty of interpretation and enforcement of the rules and regulations in the PRC, which can change quickly with little advance notice, and any future actions of the PRC authorities, additional compliance procedures may be required in connection with this offering and our business operations. As a result, we face uncertainty about future actions by the PRC government that could significantly affect our ability to offer or continue to offer securities to investors and cause the value of our Common Shares to significantly decline or be worthless. We or our PRC subsidiaries may be subject to PRC laws relating to the use, sharing, retention, security and transfer of confidential and private information, such as personal information and other data. These laws continue to develop, and the PRC government may adopt other rules and restrictions in the future. Non-compliance could result in penalties or other significant legal liabilities. The Cybersecurity Law, which was adopted by the National People's Congress on November 7, 2016 and came into force on June 1, 2017, and the Cybersecurity Review Measures, or the "Review Measures," which were promulgated on April 13, 2020, amended on December 28, 2021 and became effective on February 15, 2022, provide that personal information and important data collected and generated by a critical information infrastructure operator in the course of its operations in China must be stored in China, and if a critical information infrastructure operator purchases internet products and services that affect or may affect national security, it should be subject to cybersecurity review by the CAC. In addition, a cybersecurity review is required where critical information infrastructure operators, or the "CIIOs," purchase network-related products and services, which products and services affect or may affect national security. Due to the lack of further interpretations, the exact scope of what constitute a "CIIO" remains unclear. Further, the PRC government authorities may have wide discretion in the interpretation and enforcement of these laws. In addition, Review Measures stipulates that an online platform operator holding more than one million users/users' individual information shall be subject to cybersecurity review before listing abroad. Cybersecurity Review Measures does not provide a definition of "online platform operator", therefore, we cannot assure you that we will not be deemed as an "online platform operator". As of the date of this annual report, we or our PRC subsidiaries have not received any notice from any authorities identifying us as a CIIO or requiring us to undertake a cybersecurity review by the CAC. Further, as of the date of this annual report, we or our PRC subsidiaries have not been subject to any penalties, fines, suspensions, investigations from any competent authorities for violation of the regulations or policies that have been issued by the CAC. On June 10, 2021, the Standing Committee of the National People's Congress promulgated the Data Security Law which took effect on September 1, 2021. The Data Security Law requires that data shall not be collected by theft or other illegal means, and it also provides that a data classification and hierarchical protection system shall be established. The data classification and hierarchical protection system protects data according to its importance in economic and social development, and the damages it may cause to national security, public interests, or the legitimate rights and interests of individuals and organizations if the data is falsified, damaged, disclosed, illegally obtained or illegally used, which protection system is expected to be built by the state for data security in the near future. On November 14, 2021, CAC published the Regulations on the Network Data Security Management (Draft for Comments), or the Data Security Management Regulations Draft to solicit public opinion and comments. Under the Data Security Management Regulations Draft, which provides that an overseas initial public offering to be conducted by a data processor processing the personal information of more than one million individuals shall apply for a cybersecurity review. Data processor means an individual or organization that independently makes decisions on the purpose and manner of processing in data processing activities, and data processing activities refers to activities such as the collection, retention, use, processing, transmission, provision, disclosure, or deletion of data. We may be deemed as a data processor under the Data Security Management Regulations Draft. However, the Data Security Management Regulations Draft has not been formally adopted. It is uncertain when the final regulation will be issued and take effect, how it will be enacted, interpreted or implemented, and whether it will affect us. There remains uncertainty as to how the Review Measures and the Data Security Management Regulations Draft will be interpreted or implemented and whether the PRC regulatory agencies, including the CAC, may adopt new laws, regulations, rules, or detailed implementation and interpretation related to the Review Measures and the Data Security Regulations Draft. If any such new laws, regulations, rules, or implementation and interpretation come into effect, we and our PRC subsidiaries expect to take all reasonable measures and actions to comply. We cannot assure you that PRC regulatory agencies, including the CAC, would take the same view as we do, and there is no assurance that we and our PRC subsidiaries can fully or timely comply with such laws should they be deemed applicable to our operations. Any cybersecurity review could also result in negative publicity with respect to our company and diversion of our managerial and financial resources. There is no certainty as to how such review or prescribed actions would impact our operations and we cannot guarantee that any clearance can be obtained or any actions that may be required for our continued listing on the Nasdaq capital market and the offering as well can be taken in a timely manner, or at all. In addition, according to the Personal Information Protection Law, where the purpose of the activity is to provide a product or service to that natural person located within China, such activity shall comply with the Personal Information Protection Law. Further, the Data Security Law provides that where any data handling activity carried out outside of the territory of China harms the national security, public interests, or the legitimate rights and interests of citizens or organizations of China, legal liability shall be investigated in accordance with such law. However, the Personal Information Protection Law and the Data Security Law are relatively new, there remains uncertainty as to how the laws will be interpreted or implemented and whether the PRC regulatory agencies, including the CAC, may adopt new laws, regulations, rules, or detailed implementation and interpretation related to the two laws. The regulatory requirements with respect to cybersecurity and data privacy are constantly evolving and can be subject to varying interpretations, and significant changes, resulting in uncertainties about the scope of our responsibilities in that regard. Failure to comply with the cybersecurity and data privacy requirements in a timely manner, or at all, may subject us to government enforcement actions and investigations, fines, penalties, suspension, or disruption of our PRC subsidiaries' operations, among other things.

On December 24, 2021, the CSRC and relevant departments of the State Council published the Draft Rules Regarding Overseas Listings, which aim to regulate overseas securities offerings and listings by China-based companies, are available for public consultation. The Draft Rules Regarding Overseas Listing aim to lay out the filing regulation arrangement for both direct and indirect overseas listing and clarify the determination criteria for indirect overseas listing in overseas markers. The Draft Rules Regarding Overseas Listing, among other things, stipulate that, after making initial applications with overseas stock markets for initial public offerings or listings, all China-based companies shall file with the CSRC within three working days. The required filing materials with the CSRC include (without limitation): (i) record-filing reports and related undertakings, (ii) compliance certificates, filing or approval documents from the primary regulator of the applicants' businesses (if applicable), (iii) security assessment opinions issued by related departments (if applicable), (iv) PRC legal opinions, and (v) prospectus. In addition, overseas offerings and listings may be prohibited for such China-based companies when any of the following applies: (1) if the intended securities offerings and listings are specifically prohibited by the laws, regulations or provision of the PRC; (2) if the intended securities offerings and listings may constitute a threat to, or endanger national security as reviewed and determined by competent authorities under the State Council in accordance with laws; (3) if there are material ownership disputes over applicants' equity interests, major assets, core technologies, etc.; (4) if, in the past three years, applicants' domestic enterprises, controlling shareholders or de facto controllers have committed corruption, bribery, embezzlement, misappropriation of property, or other criminal offenses disruptive to the order of the socialist market economy, or are currently under judicial investigation for suspicion of criminal offenses, or are under investigation for suspicion of major violations; (5) if, in the past three years, any directors, supervisors, or senior executives of applicants have been subject to administrative punishments for severe violations, or are currently under judicial investigation for suspicion of criminal offenses, or are under investigation for suspicion of major violations; (6) other circumstances as prescribed by the State Council. The Draft Administrative Provisions further stipulate that a fine between RMB 1 million and RMB 10 million may be imposed if an applicant fails to fulfill the filing requirements with the CSRC or conducts an overseas offering or listing in violation of the Draft Rules Regarding Overseas Listings, and in cases of severe violations, a parallel order to suspend relevant businesses or halt operations for rectification may be issued, and relevant business permits or operational license revoked. The Draft Rules Regarding Overseas Listings, if enacted, may subject us to additional compliance requirements in the future, and though we believe that none of the situations that would clearly prohibit overseas listing and offering applies to us, we cannot assure you that we will be able to receive clearance of such filing requirements in a timely manner, or at all. There is also the possibility that we may not be able to obtain or maintain such approval or that we inadvertently concluded that such approval was not required. If prior CSRC approval was required while we inadvertently concluded that such approval was not required or if applicable laws and regulations or the interpretation of such were modified to require us to obtain the CSRC approval in the future, we may face regulatory actions or other sanctions from the CSRC or other Chinese regulatory authorities. These authorities may impose fines and penalties upon our operations in China, limit our operating privileges in China, delay or restrict the repatriation of the proceeds from offerings into China, or take other actions that could have a material adverse effect upon our business, financial condition, results of operations, reputation and prospects, as well as the trading price of our Common Shares. Any failure of us to fully comply with new regulatory requirements may significantly limit or completely hinder our ability to offer or continue to offer the Common Shares, cause significant disruption to our business operations, severely damage our reputation, materially and adversely affect our financial condition and results of operations, and cause the Common Shares to significantly decline in value or become worthless.

The Chinese government has exercised and continues to exercise substantial control over virtually every sector of the Chinese economy through regulation and state ownership. Our ability to operate in China may be harmed by changes in its laws and regulations, including those relating to securities regulation, data protection, cybersecurity and mergers and acquisitions and other matters. The central or local governments of these jurisdictions may impose new, stricter regulations or interpretations of existing regulations that would require additional expenditures and efforts on our part to ensure our compliance with such regulations or interpretations. Government actions in the future could significantly affect economic conditions in China or particular regions thereof and could require us to materially change our operating activities or divest ourselves of any interests we hold in Chinese assets. Our business may be subject to various government and regulatory interference in the provinces in which we operate. We may incur increased costs necessary to comply with existing and newly adopted laws and regulations or penalties for any failure to comply. Our operations could be adversely affected, directly or indirectly, by existing or future laws and regulations relating to our business or industry. Given recent statements by the Chinese government indicating an intent to exert more oversight and control over offerings that are conducted overseas and/or foreign investment in China-based issuers, any such action could significantly limit or completely hinder our ability to offer or continue to offer securities to investors and cause the value of such securities to significantly decline or become worthless. Recently, the General Office of the Central Committee of the Communist Party of China and the General Office of the State Council jointly issued the Opinions on Severely Cracking Down on Illegal Securities Activities According to Law, or the Opinions, which was made available to the public on July 6, 2021. The Opinions emphasized the need to strengthen the administration over illegal securities activities, and the need to strengthen the supervision over overseas listings by Chinese companies. Effective measures, such as promoting the construction of relevant regulatory systems, will be taken to deal with the risks and incidents of China-concept overseas listed companies. As of the date of this annual report, we have not received any inquiry, notice, warning, or sanctions from PRC government authorities in connection with the Opinions. On June 10, 2021, the Standing Committee of the National People's Congress of China, or the SCNPC, promulgated the PRC Data Security Law, which took effect in September 2021. The PRC Data Security Law imposes data security and privacy obligations on entities and individuals carrying out data activities, and introduces a data classification and hierarchical protection system based on the importance of data in economic and social development, and the degree of harm it will cause to national security, public interests, or legitimate rights and interests of individuals or organizations when such data is tampered with, destroyed, leaked, illegally acquired or used. The PRC Data Security Law also provides for a national security review procedure for data activities that may affect national security and imposes export restrictions on certain data an information. In early July 2021, regulatory authorities in China launched cybersecurity investigations with regard to several China-based companies that are listed in the United States. The Chinese cybersecurity regulator announced on July 2 that it had begun an investigation of Didi Global Inc. (NYSE: DIDI) and two days later ordered that the company's app be removed from smartphone app stores. On July 5, 2021, the Chinese cybersecurity regulator launched the same investigation on two other Internet platforms, China's Full Truck Alliance of Full Truck Alliance Co. Ltd. (NYSE: YMM) and Boss of KANZHUN LIMITED (Nasdaq: BZ). On July 24, 2021, the General Office of the Communist Party of China Central Committee and the General Office of the State Council jointly released the Guidelines for Further Easing the Burden of Excessive Homework and Off-campus Tutoring for Students at the Stage of Compulsory Education, pursuant to which foreign investment in such firms via mergers and acquisitions, franchise development, and variable interest entities are banned from this sector. On November 14, 2021, the Cyberspace Administration of China ("CAC") released the Regulations on the Network Data Security Management (Draft for Comments), or the Data Security Management Regulations Draft, to solicit public opinion and comments. Pursuant to the Data Security Management Regulations Draft, data processor holding more than one million users/users' individual information shall be subject to cybersecurity review before listing abroad. Data processing activities refers to activities such as the collection, retention, use, processing, transmission, provision, disclosure, or deletion of data. According to the latest amended Cybersecurity Review Measures, which was promulgated on December 28, 2021, and became effective on February 15, 2022 and replace the Cybersecurity Review Measures promulgated on April 13, 2020, an online platform operator holding more than one million users/users' individual information shall be subject to cybersecurity review before listing abroad. Since the Cybersecurity Review Measures is new, the implementation and interpretation thereof is not yet clear. As of the date of this annual report, we have not been informed by any PRC governmental authority of any requirement that we file for approval. On August 17, 2021, the State Council promulgated the Regulations on the Protection of the Security of Critical Information Infrastructure, or the Regulations, which took effect on September 1, 2021. The Regulations supplement and specify the provisions on the security of critical information infrastructure as stated in the Cybersecurity Review Measures. The Regulations provide, among others, that protection department of certain industry or sector shall notify the operator of the critical information infrastructure in time after the identification of certain critical information infrastructure. On August 20, 2021, the SCNPC promulgated the Personal Information Protection Law of the PRC, or the Personal Information Protection Law, which took effect in November 2021. As the first systematic and comprehensive law specifically for the protection of personal information in the PRC, the Personal Information Protection Law provides, among others, that (i) an individual's consent shall be obtained to use sensitive personal information, such as biometric characteristics and individual location tracking, (ii) personal information operators using sensitive personal information shall notify individuals of the necessity of such use and impact on the individual's rights, and (iii) where personal information operators reject an individual's request to exercise his or her rights, the individual may file a lawsuit with a People's Court. Given that the above mentioned newly promulgated laws, regulations and policies were recently promulgated or issued, and have not yet taken effect (as applicable), their interpretation, application and enforcement are subject to substantial uncertainties.

The PRC legal system is based on written statutes. Prior court decisions may be cited for reference but have limited precedential value. We conduct some of our business through our PRC Subsidiaries, and therefore these subsidiaries are generally subject to laws and regulations applicable to foreign investment in China. However, since these laws and regulations are relatively new and the PRC legal system continues to rapidly evolve, the interpretations of many laws, regulations and rules are not always uniform and enforcement of these laws, regulations and rules involves uncertainties, which may limit legal protections available to us. Recently, the General Office of the Central Committee of the Communist Party of China and the General Office of the State Council jointly issued the "Opinions on Severely Cracking Down on Illegal Securities Activities According to Law," or the Opinions, which was made available to the public on July 6, 2021. The Opinions emphasized the need to strengthen the administration over illegal securities activities, and the need to strengthen the supervision over overseas listings by Chinese companies. Effective measures, such as promoting the construction of relevant regulatory systems will be taken to deal with the risks and incidents of China-concept overseas listed companies, and cybersecurity and data privacy protection requirements, etc. The Opinions and any related implementing rules to be enacted may subject us to compliance requirement in the future. In addition, some regulatory requirements issued by certain PRC government authorities may not be consistently applied by other government authorities (including local government authorities), thus making strict compliance with all regulatory requirements impractical, or in some circumstances impossible. For example, we may have to resort to administrative and court proceedings to enforce the legal protection that we enjoy either by law or contract. However, since PRC administrative and court authorities have discretion in interpreting and implementing statutory and contractual terms, it may be more difficult to predict the outcome of administrative and court proceedings and the level of legal protection we enjoy than in more developed legal systems. These uncertainties may impede our ability to enforce the contracts we have entered into with our business partners, customers and suppliers. In addition, such uncertainties, including any inability to enforce our contracts, together with any development or interpretation of PRC law that is adverse to us, could materially and adversely affect our business and operations. Furthermore, intellectual property rights and confidentiality protections in China may not be as effective as in the United States or other more developed countries. We cannot predict the effect of future developments in the PRC legal system, including the promulgation of new laws, changes to existing laws or the interpretation or enforcement thereof, or the preemption of local regulations by national laws. These uncertainties could limit the legal protections available to us and other foreign investors, including you. In addition, any litigation in China may be protracted and result in substantial costs and diversion of our resources and management attention.