At the Group, level we build customer protection into our policies. Our Health and Safety Policy sets out our goal of zero harm to customers, with each company under our management control applying this policy in a way which is relevant to its business.
The Swire Pacific Personal Data Protection Policy requires Swire Pacific Group companies to comply with applicable legal requirements relating to the handling of personal data (including its collection, holding, processing, disclosure, and use) and to respect the privacy of others and the confidentiality of information received in the course of business.
Where relevant, our subsidiaries have dedicated governance to oversee implementation and efficacy of data protection policies. Our Group Personal Data Protection Policy and Guidelines require our operating companies to appoint a Data Protection Officer, carry out Privacy Impact Assessments, and establish a Data Privacy Policy. Further information is available in the ESG Risk Management section of this report and the Swire Pacific Annual Report 2025.
Employees are required to follow internal guidelines covering the collection, processing, transfer, retention, and disposal of customers’ personal data. Data protection obligations are included in contracts with third-party data processors.
During 2025, there were no convictions for non-compliance with laws and regulations relating to customer privacy that would have a significant impact on the Group. The approach of our major businesses to related customer issues is described below.