TCL科技集团股份有限公司

2023

Corporate Governance

Business Ethics

Data Security and Privacy Protection

Corporate Governance

TCL Tech. legally establishes the General Meeting, Board of Directors, various dedicated committees, the Board of Supervisors and the management team, and formulates corresponding rules of procedure and work and management rules.

TCL Technology held the General Meeting and the Board of Supervisors.

In 2023, the Company convened a total of four general meetings, with a cumulative attendance of 631 shareholders (representatives), deliberating on 22 agenda items, all of which were passed with a 100% approval rate.The Board of Supervisors convened a total of six meetings, deliberating and approving 15 agenda items, with a 100% attendance rate at all meetings.

TCL Tech. has established an Investor Relations Department

TCL Tech. has established an Investor Relations Department, actively developing a comprehensive investor relations management system, focusing on communication between investors and potential investors to enhance their understanding and engagement with the company, fostering positive interactions. TCL Tech. 2023 Annual Investor Communication Performance organized 4 investor research activities，hosted nearly 800 institutional visits.

Business Ethics

TCL Tech. adheres strictly to commercial ethics and industry standards in the operations, striving to cultivate a culture of integrity and self-discipline. We absolutely do not tolerate any corruption, embezzlement, bribery and other behaviors, and actively advocate and fully practice the business principles of fair competition.

Data Security and Privacy Protection

We have established the Company's integrity governance system with the "TCL Ten Red Lines" at its core, outlining a series of measures to prevent commercial corruption. The Company has set up a dedicated department to serve as an anti-corruption body, reporting to the Company's Audit Committee. All employees are required to sign the Commitment to Integrity, while suppliers and clients are requested to sign either the Integrity Agreement or the Code of Conduct for Partners. In 2023, we continued to enhance our audit supervision comprehensively, improving the effectiveness of audit rectifications to empower our business. We remain committed to a three-pronged approach of scientific precision, targeting all aspects of punishment, to drive the Company's integrity management efforts forward.In 2023, TCL Tech. held a total of 32 sessions of integrity warning education training. Training participation reached 89,663 attendances.

TCL Tech. Integrity Management Policy Framework

We have established a systematic integrity education and training framework, effectively enhancing the integrity and selfdiscipline awareness of all employees through activities such as new employee orientation and specialized training for high-risk positions. During the reporting period, TCL Tech. achieved full coverage of integrity warning education and training for all staff. We conducted special reminders on employee conflict of interest declaration and the submission of gifts and cash, as well as two rounds of thematic promotion on the TCL Confidentiality Management Regulations.

Anti-Monopoly and Anti-Unfair Competition

We adhere to laws and regulations such as the Anti-monopoly Law, the Anti-unfair Competition Law, and the Foreign Trade Law, actively guarding against and proactively addressing risks of monopolistic practices and unfair competition in the market. Concurrently, we closely monitor changes in domestic and international anti-monopoly policies and regulatory dynamics, promptly analysing and researching their potential impacts on company operations, and taking effective measures to actively respond and implement.

Data Security and Privacy Protection

TCL Tech. considers data security and privacy protection as an important guarantee for enterprise development, strictly abides by relevant laws and regulations, and continuously improves the Company's data management system to continuously strengthen its data security protection capability.

Data Security

We comply with the relevant requirements of ISO 27001, ISO 27701, ISO 9001 and other standards, formulate data security and privacy protection policies, establish a management system covering the physical environment, personnel security, network, system, development and operation, information security incident management and other areas. We issue documents such as the Information and Data Security System, and carry out attack and defense drills, information security patrols, and security operations, etc. The Company has no information security incidents in 2023. work, and make every effort to safeguard the security of business information and customer privacy. In 2023, the Company did not have any information security incidents.

Privacy Protection

TCL Tech. has deployed systematic policies and measures to protect customer privacy, categorized and graded management of relevant data, and set up a strict access audit and monitoring system, and formulated systematic countermeasures against possible leakage of customer privacy. In the event of a data security incident involving the leakage, alteration or loss of personal information, the Company will work together with relevant departments to study and respond to the incident, and if necessary, report it to the regulatory authorities for support, so as to do its best to eliminate or make up for any possible impact on customers. TCL CSOT, in collaboration with its legal and business departments, conducts Personal Information Protection Impact Assessment (PIA) on an as-needed basis, and develops the Information Security Management System(ISMS) Privacy and Personally Identifiable Information(PII) Protection Management Code to protect the privacy and PII information of the company's employees and external related parties. TCL Zhonghuan comprehensively prevents and controls the risk of customer privacy leakage in the collection, transmission, and use of customer information. The company and its business groups (BG) and business units (BU) conduct quarterly vulnerability scans and analysis of industrial control traffic, and carry out cybersecurity attack and defense drills on an annual basis.