Company: HBCYF
Filing Date: 2025-02-20
Form Type: 20-F
Source: 0001089113-25-000040
Chunk: 150

Company: HSBC HOLDINGS PLC
Filing Date: 2025-02-20
Form: 20-F
Chunk 150
---
 into our procurement practices and define a clear set of requirements for our suppliers. – Since its launch in 2023, the Supplier Diversity Portal is now live in a number of jurisdictions. Further expansion is planned for 2025 to reach a wider demographic of diverse-owned suppliers (at least 51% owned, managed or controlled by a historically and locally under-represented group). For further details, see www.hsbc.com/who-we-are/esg-and- responsible-business/working-with-suppliers. – To increase engagement with diverse- owned suppliers, we introduced a development programme. The programme is designed to empower diverse-owned suppliers to effectively engage with large corporations, including HSBC, and supports our ambition to further diversify our supply chain, to represent the communities that we operate in. Supplier code of conduct Our supplier code of conduct (‘the code’) was refreshed in 2024, setting out our ambitions and areas of focus on the environment, diversity and human rights, and outlines the minimum standards we expect of our suppliers on these issues. We continue to formalise adherence to the code with clauses in our supplier contracts, which support the right to audit and act if a breach is discovered. At the end of 2024, 96.7% of approximately 10,200 contracted suppliers had either confirmed adherence to the code or provided their own alternative that was accepted by our Global Procurement function. For further details of the number of suppliers in each geographical region, see the ESG Data Pack at www.hsbc.com/esg.

| HSBC Holdings plcAnnual Report on Form 20-F | 81 |

Safeguarding data Data privacy

| Data Privacy Day                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| In February 2024, we held a global onlineevent for our colleagues to markInternational Data Privacy Day. The eventwas hosted by our Global Head of DataLegal, in collaboration with theInternational Association of PrivacyProfessionals.The discussion focused on keydevelopments in the data privacylandscape for 2024 and beyond, includingthe impact of digital entropy and rapidlyevolving AI-related advancements. Thiswas followed by a Q&A with theaudience to encourage further dialogue. |

We are committed to protecting the data we process, in accordance with the laws and regulations of the markets in which we operate. Our approach rests on having the right talent, technology, systems, controls, policies and processes to ensure appropriate management of privacy risk. Our Group-wide data risk policy and principles provide a consistent global approach to managing data privacy risk, and