To ensure effective risk management, system security, fair treatment of customers, protection of consumer rights, and sustainable development through the use of artificial intelligence systems, Taiwan Business Bank (hereinafter referred to as TBB) has established this policy in accordance with the Financial Supervisory Commission's "Guidelines for Artificial Intelligence (AI) Applications in the Fi-nancial Industry" and The Bankers Associationof the Republic of China's "Oper-ational Guidelines for Artificial Intelligence Applications Used by Financial In-stitutions" based on risk and implementing core principles.

This policy applies to the artificial intelligence systems used in all business oper-ations of TBB.

The following terms are defined in this policy:

• Artificial Intelligence System: Refers to a system that learns from large amounts of data and utilizes machine learning or related algorithms to build models, mimicking human learning, thinking, and reaction patterns in areas such as perception, prediction, decision-making, planning, reasoning, and communication.
• Generative Artificial Intelligence: Refers to technologies that learn from large amounts of data to generate content that simulates human intelligence, including but not limited to text, images, sound, photographs, videos, and code.

The following principles should be followed when utilizing artificial intelligence systems:

• Establish governance and accountability mechanisms.
• Emphasize fairness and human-centered values.
• Protect privacy and customer rights.
• Ensure system robustness and security.
• Implement transparency and explainability.
• Promote sustainable development.

When using artificial intelligence systems, TBB shall comply with relevant laws and regulations concerning information security, personal data protection, finan-cial consumer protection, and intellectual property rights to ensure the legality and compliance of its use of artificial intelligence systems.

TBB shall establish an artificial intelligence risk management mechanism, conduct relevant risk assessments when using artificial intelligence systems, and adopt appropriate risk control measures based on the risk assessment results to reduce potential risks.

TBB shall establish lifecycle management for artificial intelligence systems and implement control over each stage of the artificial intelligence system lifecycle based on the risk assessment results. Regardless of whether it is developed in-house or provided by a third party, TBB shall identify and assess the degree of risk that it can control at each stage of the lifecycle. For the parts or matters that it has less control over, TBB shall, through contracts or other means, clearly define the division of risk control responsibilities between TBB and the third party.

TBB has established an "Artificial Intelligence Governance and Development Committee" and formulated relevant regulations, defining the responsibilities of the governance organization, supervising and managing TBB's use of artificial intelligence systems, and providing necessary resources to ensure that the appli-cation of artificial intelligence complies with laws and regulations and meets gov-ernance requirements.
The establishment procedures for TBB's "Artificial Intelligence Governance and Development Committee" will be stipulated separately.

TBB shall establish an artificial intelligence governance review process and con-duct reviews to ensure that aspects such as risk assessment, legality, system ro-bustness, data governance, information security, consumer protection, sustainable development, and contingency measures for unforeseen events are all taken into consideration and managed.

When using artificial intelligence systems,TBB shall ensure fairness, avoid in-fringing upon the autonomy of customers or employees, and respect basic human rights, preventing bias and discrimination.
When using artificial intelligence systems, TBB shall plan appropriate human oversight mechanisms based on the impact of the systems.
When using generative artificial intelligence systems developed by third parties, TBB shall conduct risk assessments and controls on the information generated to ensure compliance and reliability in their use.

When using artificial intelligence systems to collect customer data, TBB shall ad-here to the principle of data minimization, avoiding the collection of excessive or unnecessary sensitive information. Customer data shall be properly managed and used to fully protect customer privacy and respect the intellectual property and trade secrets of others.
TBB shall not provide customer information disclosed or made public without the customer's consent when using artificial intelligence systems; however, this does not apply to information that does not involve personal data or information that cannot identify the customer.
When providing services or information to customers using artificial intelligence systems, TBB shall assess whether to provide alternative solutions and remedial measures, and inform customers of the relevant details, ensuring their right to choose alternative solutions.

TBB shall establish appropriate control measures for data management, infor-mation security protection, and other aspects of the use of artificial intelligence systems, and incorporate them into its internal control operations.
TBB shall implement management of third-party vendors and, when necessary, may commission third-party auditing or evaluation agencies to conduct inde-pendent verification to ensure the robustness and security of the systems.

TBB shall ensure transparency and explainability in the operation of its artificial intelligence systems at each stage of their lifecycle.

When using artificial intelligence systems to conduct business interactions with customers, TBB shall disclose relevant information to customers in an appropriate manner to help them understand the positive or negative impact on their rights.
TBB shall have a clear understanding of the operation and logic of its artificial intelligence systems to help it assess whether they comply with its policies, oper-ating procedures, and regulatory requirements.

When utilizing artificial intelligence (AI) systems, TBB shall ensure that its de-velopment strategies and implementation take into account international sus-tainable development goals and TBB's sustainable development principles, en-compassing environmental, social, and governance aspects.
Before implementing an AI system, TBB shall identify and assess the system's environmental and social impacts or risks, and make appropriate plans to achieve sustainable development.
Before implementing an AI system, TBB shall assess the impact of its implemen-tation on employee rights and work patterns, and provide appropriate education and training.
TBB shall implement general education and training on the use of AI systems to enhance employees' knowledge of AI system applications, promote the imple-mentation of AI systems, ensure TBB personnel have sufficient knowledge and skills in AI, and make appropriate decisions and oversight regarding the use of AI systems based on risk.

TBB shall review this policy at least annually, or re-review it when there are sig-nificant changes in laws or related technologies, to ensure that its content complies with relevant laws and technological developments concerning artificial intelli-gence governance and TBB 's operational needs, and continuously adapts to changes in the internal and external environment.
The annual review is authorized to be carried out by the management department. If revisions are necessary after the review, they shall be submitted to the Board of Directors for review.

Any matters not covered in this policy shall be handled in accordance with laws and regulations and the relevant provisions of TBB.

This policy shall be implemented after being approved by the Board of Directors, and the same applies to any amendments thereto.