Company: SHG
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0001193125-25-089950
Chunk: 47

Company: SHINHAN FINANCIAL GROUP CO LTD
Filing Date: 2025-04-23
Form: 20-F
Chunk 47
---
 DS, our IT services subsidiary that specializes in IT system development and management as well as cyber security and information protection, to build a continuous security research and development system aimed at responding to the latest hacking and other cyber threats. Through these measures, we are developing technical capabilities necessary to respond to the latest security threats. We also provide intensive employee training to our information technology staff and other employees on cyber security and have adopted advanced security infrastructure (including through hiring a highly competent team of information security experts) for online financial services such as mandatory website certification and keyboard security functions. In addition, reviews of our system are conducted, across all of our subsidiaries, through periodic audits and simulation reviews by external experts. In addition, in compliance with applicable regulations we currently carry insurance to cover cyber security breaches up to W10 billion in relation to our banking business and up to W3 billion in the aggregate and up to W1 billion per incident for our securities investment business and have set aside a reserve of W1 billion for our credit card business. In addition, in light of the growing use of mobile devices to access financial services, we have implemented security measures (including encryptions and service terminal monitoring) to provide a secure mobile banking service as well as to prevent illegal leakage or sharing of customer data and otherwise enhance customer privacy. We are also keenly aware of the litigation and regulatory sanctions risks that may arise from security breaches and are aggressively reinforcing a group-wide culture that stresses safety and good custodianship as among our highest priorities. Furthermore, we are actively taking steps to implement preventive and other steps recommended or required by the regulatory authorities in relation to actual and potential financial scams. Although we have not experienced any material security breaches or any similar large scale leakage of customer information recently, given the unpredictable and continually evolving nature of cyber security threats due to advances in technology or other reasons, there is no assurance that, notwithstanding our best efforts at maintaining the best-in-class cyber security systems, we will not be vulnerable to major cyber security attacks in the future.

The public is developing heightened awareness about the importance of keeping their personal data private, and the financial regulators are placing greater emphasis on data protection by financial service providers. For example, under the Personal Information Protection Act, as amended in March 2023, financial institutions, as personal information manager, may not collect, store, maintain, utilize or provide resident registration numbers of their customers, unless other laws or regulations specifically request or permit the management of resident registration numbers. Further, under the Use and Protection of Credit Information Act, as last