Weichai regards data as a core strategic asset and strictly complies with the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Personal Information Protection Law of the People's Republic of China, the European Union's General Data Protection Regulation (GDPR), and other globally applicable regulations. Weichai protects the legitimate rights of owners of personal data and commercial data involved in the course of business operations, obtains the above data in accordance with the requirements of relevant laws and regulations, and takes strict measures to protect the security of the above data, building a solid data security defense line.

Weichai adopts industry-recognized data protection methods and practices. In the business scenarios related to data processing activities, we:

(1) Establish data classification and grading standards and differentiated management and control strategies covering all business scenarios, comply with domestic and foreign data compliance-related regulations in stages such as data collection, storage, use, processing, transmission, provision, disclosure, and destruction, and ensure that data is fully traceable, effectively protected, and legally utilized.

(2) Establish a data compliance emergency response mechanism, organize data leakage emergency drills regularly, strengthen the verifiability of daily post responsibilities and emergency response mechanisms, fully prevent the occurrence of data leakage events, and scientifically implement data leakage disposal plans.

(3) Incorporate data compliance into partner admission assessments and cooperation agreements, require partners to sign compliance commitment letters, and clarify data processing boundaries and confidentiality obligations.

(4) Adopt industry-leading encryption technology, access control, data desensitization, and other protection measures, embed compliance requirements into the IT system architecture, and realize automated monitoring of data processing and early warning of abnormal behaviors.

Weichai continuously provides data compliance training to employees, attaches importance to improving employees' data compliance awareness, and ensures that every employee and partner can accurately understand data compliance requirements based on their specific work and duty needs, and strictly implement the company's corresponding management and control specifications.

Weichai strictly follows the "minimum necessity" principle to obtain and use data, legally fulfills obligations such as informed consent and response to data subjects' rights, and strictly prohibits over-scope collection and abuse of data. Any behavior that violates data security regulations and company policies will be subject to disciplinary action depending on the circumstances, up to the termination of the labor contract; Those suspected of breaking the law will be held legally responsible in accordance with the law.

Weichai hopes that all partners, in the process of conducting business with Weichai, will jointly comply with the applicable data compliance-related laws and regulations necessary for business operations.