Regulations Governing Cross-selling Activities Among Subsidiaries of a Financial Holding Company Article 14

When subsidiaries of a financial holding company conduct cross-selling, share customer data, and jointly use personnel and equipment to refer products of other businesses, or engage in marketing-related preliminary or follow-up work other than the conclusion or fulfillment of transaction contracts, they shall establish appropriate internal control systems and risk management systems and ensure effective implementation. They shall also conduct internal audits and self-audits in accordance with the regulations of the implementation measures for internal control and internal audit systems prescribed by the laws and regulations governing each respective industry. The contents thereof shall include the following matters:1. Operation guidelines for conducting cross-selling business, sharing customer data for marketing, and joint use of personnel and equipment to conduct cross-industry marketing.2. A code of conduct for the management of personnel itself who handle the other businesses (the contents of which shall at least include penal provisions for violations of relevant laws, regulations, or operation guidelines of other industries).3. Procedures for handling customer complaints.4. Operation guidelines regarding internal standard procedures, allocation of liabilities, and the division of powers and responsibilities between other subsidiaries and itself for handling customers’ transaction disputes.5. Formulation of a code of ethics for the use of customer data and strengthened employee training for compliance by employees.