ESG Report 2024

21 Environmental, Social and Governance Report 2024 The United Laboratories International Holdings Limited 5.4.3 Privacy Protection In business operations, personnel across various departments of the Group may come into contact with different types of personal information, including data from customers, shareholders, employees, and candidates, which creates a risk of personal information and privacy leakage. To effectively mitigate such risks, the Group has established “The United Laboratories Patient Information Protection Policy” and “The United Laboratories Information Confidentiality Policy” to ensure the Group legally obtains and use personal information, protect the legal rights and interests of information providers, and prevent risks from improper management of personal information. The system has regulated the methods on collection, use, transmission and storage of personal information, reducing the likelihood of employees violating relevant laws when processing personal information, and avoided bringing negative impacts to stakeholders. In order to improve the efficiency and effectiveness of patients' information management, the Group has developed the “Smart United Laboratories” mobile office platform system. The system integrates a variety of functions, including big data management capabilities that enable comprehensive utilisation and mobile analysis of data, while the patient data micro-file system further strengthens the management of patient information, facilitating customer follow-ups and enhancing the security of information usage. To ensure data security, the Group has established a Digital Centre and Information Security Auditors responsible for comprehensive data security management. We have implemented multiple measures to prevent the leakage or damage of patient information, including enforcing access controls for personnel who handle patient data, implementing a "User Agreement" and "Privacy Protection Policy," and strengthening cybersecurity to guard against virus attacks and unauthorised database intrusions. Patient information is stored in the platform system according to the length of aftersales service and expired information will be destroyed by the Marketing Department, in which the process is monitored and documented by dedicated personnel. 5.5 Protection of Intellectual Property Rights The Group has made continual breakthroughs in the research and development of pharmaceuticals and innovative production technologies, and therefore the protection of our commodities' patents and intellectual property rights has become an indispensable part of the protection of our products and assets. In order to promote the Group's management of intellectual property rights and to fully develop the benefits of patented commodities and assets, we have established The United Laboratories Intellectual Property Management Measures in accordance with relevant laws and regulations to regulate the patent application and maintenance work. For new technologies, new processes, new formulas, utility models and product packaging designs, the Group will carry out comprehensive patent rights application and maintenance to create favourable conditions for the Group's research, development and innovation. The Group's Intellectual Property Department is responsible for the management of intellectual property related matters, including the application and maintenance of patents and intellectual property marks. It supervises the relevant units in stopping, reporting and collecting evidence against infringements, while also cooperating with the national efforts to combat infringement activities. While actively protecting its own intellectual property rights, the Group also strictly complies with the law and does not infringe upon the copyrights of other enterprises or individuals. To further strengthen the protection of patented technologies such as technologies, processes, and formulas, the Group has set up an Intellectual Property Affairs Department to ensure that innovative achievements are fully protected and to provide solid intellectual property support for the Group's sustainable development. In respect of trademark management, The Group’s Legal Affairs Centre is responsible for related registration, renewal management, authorisation and protection of rights. The use of trademarks must be audited by the Legal Affairs Centre to ensure that their use is in compliance with the regulations and under effective control. When printing materials with trademarks (such as product packaging), the Group only collaborates with reputable printing factories and strictly destroys defective products and obsolete trademarks to prevent them from leaking and being misused by unscrupulous manufacturers, thereby protecting the legal rights and brand image of the Group’s trademarks. Aspects Regulations and Guidelines Internal Policies Patent Law of the People’s Republic of China Trademark Law of the People’s Republic of China Copyright Law of the People’s Republic of China Anti-Unfair Competition Law of the People’s Republic of China Intellectual Property Management The United Laboratories Intellectual Property Management Measures