Four committees are set up under the Board of Lufax Holding, namely Audit Committee, Nomination and Remuneration Committee, Consumer Protection and ESG Committee, and Risk Control and Compliance Committee.

In order to effectively manage all risks in the course of operation, the Company has established a risk management-centric three lines of defense to ensure that the Company can operate in a stable and regulated manner.

First line of defense

Composed of business departments and is responsible for identifying, assessing, responding to, monitoring and reporting risks in the front end of business.

Second line of defense

Composed of the Board-level Risk Control and Compliance Committee, the Risk Control and Compliance Executive Committee as well as risk management functional departments. It is responsible for the development of various risk systems, standards and limits.

Third line of defense

Composed of the Board-level Audit Committee and the Internal Audit Department. It is responsible for supervising the existing risk management process, risk control procedures and activities within the Company.

Lufax Holding always adheres to the principle of compliant operation, continuously improves and refines our system to enhance the effectiveness of internal control management.

For more details, please refer to the Code of Business Conduct and Code of Business Conduct for Employees.

The interests of financial consumers are the basis for the sound industry development, which are also of great significance for maintaining financial stability and promoting social harmony. Adhering to the mission of “Finance for people”, Lufax protects consumer rights and interests throughout the entire service process. By disclosing information to consumers, and upholding the principle of fair trading, we protect financial rights and interests of consumers as stipulated by law, such as their right to information and independent choice. At the same time, we join forces with local institutions to publicize financial knowledge among consumers, including anti-fraud knowledge and tips, to improve their financial literacy and safeguard their assets.

We follow the collection principles of "compliance with the law, equality and objectivity, and protection of privacy", establish and improve the management mechanism of the collection business, standardize the workflow of the collection process, protect the legitimate rights and interests of the customers and the company on an equal basis, carry out the collection work on the basis of the objective facts and ensure that information security of the whole process of collection is ensured.

For details, please download the Collection Policy Statement.

Lufax Holding attaches great importance to information security and users' privacy protection. We have formulated and implemented internal systems related to information security, such as security policy, security strategy, security rules, security baseline, operation guidelines and technical standards. At the same time, we make it clear that individual users have the right to access, correct, delete and revoke his/her personal information on our platforms to protect users’ privacy.

For more details, please refer to the Policy Statement on Information Security Management and Policy Statement on Privacy Protection.