Yinson Annual Report 2020

71 Annual Report 2020 Personal Data Protection Act (“PDPA”) and General Data Protection Regulation (“GDPR”) Yinson stepped up our practices pertaining to PDPA and GDPR within this review period, with measures implemented including: • Setting up the structure of Data Protection in Yinson with the appointment of a Chief DPO and local DPOs for our respective offices • Implementing corrective measures to address existing Personal Data and GDPR issues • Undertaking relevant trainings for key personnel relating to Personal Data laws in respective countries • Awareness briefings and talks conducted during our Yinson Up training event. In FYE 2021, we plan to further operationalise PDPA efforts by incorporating PDPA notifications on our public website according to our operating countries and including our Privacy Notice on both external and internal communication platforms. Moving forward, we aim to train and mobilise our respective DPOs to drive PDPA efforts on a local level to maintain adequate personal data protection of our employees and business contacts. Strengthen sustainability governance and reporting The Group places high importance in managing sustainability throughout our operations. Sustainability Governance at Yinson mainly relates to the strategies and Governance trainings and awareness • 25 physical ABAC workshops held Group-wide since 2018 • Online ABAC trainings held since 2019 • Survey done to obtain feedback from internal and external parties on content of ABAC online training module Sustainability Statement (pg 42) corresponding structures that are utilised to better manage ESG matters. To ensure our overall sustainability strategy is aligned to our stakeholders’ views, we revised our Sustainability Policy in the review period. The new document acts as our key guiding framework for managing all ESG matters, and was created based on the Materiality Matrix that was developed after obtaining inputs from both internal and external stakeholders. Our Whistleblowing Policy and Procedure was further updated in FYE 2020. The enhanced document now allows anonymous whistleblowing and lists examples of reportable conducts. To date, Yinson has not received any substantiated whistleblowing reports. Nonetheless, we will be increasing communications relating to whistleblowing internally moving forward. 6