To ensure the security and compliance of its core sensitive data, Tianqi Lithium consistently upholds a high level of professionalism and responsibility in the area of data privacy protection and is committed to establishing a rigorous and efficient data management framework while it experiences rapid growth in business digitization. In terms of technology, Tianqi Lithium employs data encryption techniques to provide multi-layered protection for core sensitive information to safeguard its security during storage, utilization, and transmission. Additionally, we have implemented stringent access control mechanisms, utilizing techniques such as authorization management and identity verification, to ensure that only legally authorized personnel can access relevant data.

Unified Organization Leadership

Under the guidance of the company’s board of directors, a Digital Strategy Committee has been established to oversee and coordinate the overall digital transformation efforts across the organization. This structure consists of three layers: the decision-making layer, led by high-level management such as the CEO, which steers the direction of the digital strategy; the planning layer, managed by the Information Management Department, responsible for coordinating resource planning and implementation; and the execution layer, which gathers the key personnel from various departments to ensure the precise implementation of the digital strategy. These three layers complement each other, collectively enhancing our data management capabilities and data security.

Construction of Information Security

The construction of information security is critical in supporting Tianqi Lithium’s operational safety and protecting the rights and interests of stakeholders. To this end, the company demonstrates a strong sense of responsibility by employing a range of technical measures, such as data encryption, access control, firewalls, and intrusion detection systems, to establish a security barrier. These initiatives aim to comprehensively and multidimensionally safeguard the security of data during transmission, storage, and use.

Employee Privacy Protection: Safeguarding employee privacy is essential for maintaining the company’s social image and enhancing employee belonging and loyalty. Tianqi Lithium ensures that the collection, storage, processing, and transmission of employee personal information (such as data from work email, compensation, benefits, performance, and competency evaluation) are subjected to strict access controls and technical measures to prevent malicious leakage of employee data.

Customer Trust: The company strengthens the protection of customer information through information technology by implementing data encryption and adhering to privacy policies, ensuring that the personal information of clients is not illegally accessed, used, or disclosed.

Governance Structure: The company places a high priority on data protection, with the Information Management Department serving as the responsible unit for information security management under the Digital Strategy Committee, tasked with formulating information security policies and standards, employing technical measures, and overseeing their implementation.

Risk Management: Tianqi Lithium regularly conducts information security risk assessments to identify potential security threats and vulnerabilities, and formulate countermeasures accordingly. By enhancing risk management and compliance controls, the company aims to reduce legal and financial risks stemming from information security incidents.

Process Data Security: Tianqi Lithium prioritizes the security of production-related data, and ensures that the company’s core technological information remains protected, which is a critical aspect of enterprise management. Data encryption serves as a key information security strategy to effectively prevent unauthorized access or disclosure of confidential data during storage, transmission, and usage. Besides, employees receive training on security awareness to strengthen their understanding of data protection.