Data Security and Privacy Protection

Weichai attaches great importance to data security and strictly complies with applicable national and regional laws and regulations data security, including but not limited to Cyber Security Law of the People’s Republic of China, Data Security Law of the People’s Republic of China, Personal Information Protection Law of the People’s Republic of China, EU’s General Data Protection Regulation (GDPR) etc., amid business operation. As Weichai respects the legal rights of the owners of personal and commercial data involved in its business operation, it obtains such data in accordance with relevant laws and regulations, and takes strict measures to protect such data and avoid disclosure.

Weichai adopts the data protection methods and practices which are recognized in the sector. In our business scenarios related to data processing activities, we:

(1)Manage and control the data by categories and grades;

(2)Set up an emergency response mechanism for data security compliance, organize data leakage emergency drills irregularly, strengthen daily post responsibilities and the verifiability of emergency response mechanism, fully prevent data leakage incidents, and implement data leakage disposal plan in a scientific manner;

(3)Embed the requirements of data protection compliance in the management of our partners;

(4)Gradually realize IT system embedding and control as required by data protection compliance.

Weichai regularly and continuously provides data protection compliance trainings for its employees, attaches importance to improving the employees’ awareness of data security compliance, and ensures that each of employees and its partners can accurately understand the requirements of data protection compliance based on their specific work tasks and responsibility needs, and strictly implement the Company’s corresponding regulations on management and control.

To implement the data security compliance policy, Weichai has established a series of guides on data compliance to guide all departments to identify and respond to data security compliance risks amid business activities based on business scenarios. Weichai provides comprehensive compliance guides and standards by means of systematic rule construction to ensure that the requirements of data protection can be easily understood and implemented by all departments and employees.

Weichai hopes that all its partners can comply with the applicable laws and regulations regarding data security together with Weichai amid the business activities.