Fairness Statement for Certification

Public Documents – Confidentiality Management Regulations

Edit Prepared by: Drafting Team

Reviewer: Zhang Daoli

BatchReady:

InitialPublish Date: 2023 0415 Revise/Effective Date: 2026Year03Month01Day

Change History

1.Purpose

In accordance with applicable laws and regulations,YesSJCInVerifyInformation obtained during the activity is kept confidential to protectReviewrights and interests of the party or client, and their protectionSJCreputation.

2. Range

This regulation applies toSJCAll personnel.

3. Responsibilities

CompanyResponsible for implementation,Relevant supervisors are responsible for ensuring effective implementation of this regulation.

4.Regulations

4.1 Confidential information includes:

a) Applicant-submitted data and documents;

b) Reviewinformation obtained therein, nonconformity reports,ReviewReports and related records;

c) Information requested by the applicant to be kept confidential;

d) This InstitutionManagement SystemFiles and related information;

e) Not from a customer (e.g.Complaintinformation regarding the customer (e.g., by or to a regulator)

f) Other information involving confidentiality.

4.2 Confidentiality Classification:

Confidential information is classified as either "Critical Confidential Information" or "Standard Confidential Information," based on its level of confidentiality, scope of involvement, and potential impact of a data breach. This includes internal employee information (including...Review, managers, technical experts, etc.,ReviewArchive Information (including application review,ReviewSolution ManagementReviewOn-site data, subjectReviewsubmission data, etc.),SJCManagement SystemThis file contains confidential and sensitive information.SJCInbound files, internal announcement documents, and promotional data are classified as General Confidential Information.

Both Critical Confidential Information and Standard Confidential Information shall be handled in accordance with this document.4.3—4.5Terms govern enforcement; electronic confidential information shall be governed by reference.SJC-TP-017《Electronic Document Control Procedure》manage.

4.3 Confidentiality Agreement

4.3.1 SJCKeep it safe4.1files, data, and records shall be stored in a dedicated cabinet. No one may copy them or disseminate them in any manner under any circumstances.

4.3.2 NoVerifyUnauthorized personnel are prohibited from removing confidential information from the workplace without prior approval.

4.3.3 Go to siteReviewwhenReviewThe team lead should be...ReviewI hereby declare compliance with this institution's confidentiality regulations.

4.3.4ReviewGroup all members, on-siteReviewVarious files and data borrowed for Chinese use, pendingReviewThe full amount must be repaid upon termination; no portion may be retained for other purposes.

4.3.5 ReviewAll members on-siteReviewIndividuals shall not, in their personal capacity, make requests to the...ReviewThe party shall not request any files or data.

4.3.6 YesVerification ReviewNoneReviewAll management and technical data are strictly confidential.

4.3.7 InSystemEnsure data confidentiality during the identification, management, and processing of records.

4.3.8 ReviewThe team leader should address the auditee during the closing meeting.ReviewThe organization's relevant certificate information will be placed inSJCPublished publicly on the website. Certificate information includes the customer (or multiple sites)Verifynames of the headquarters and any site locations within the scope) and relatedRegulatory documents, scope, and geographic location. All other information, except for what the customerAll information not publicly available shall be kept confidential.

4.3.9 Precautions for Disclosing Confidential Information:

a) If confidential information must be shared with other certification bodies or peer assessment scheme consortia for business purposes, inform your clients of this measure.,and obtain written consent from the customer.

b) When providing a customer's confidential information to fulfill legal obligations, unless otherwise required by law, the relevant customer or individual must be notified in advance.

4.4 Confidentiality Commitment

4.4.1 SJCAll personnel must signSJC-TR-44《Commitment to Fairness and Confidentiality》,and keep confidential any information you come into contact with.

4.4.2 JoinReviewpersonnel involved in participatingReviewA commitment to impartiality should be made in advance.

4.4.3 InVerifyDuring the event, to avoid external hiresReviewApplicant or expert with the applicant (or alreadyVerify ReviewIf there is a potential conflict of interest, the applicant must be provided with the external consultant's professional background and institutional information in advance to obtain their consent. Otherwise, the external consultant shall recuse themselves from participating in the relevantVerifyActivity or inability to access relevant files and documents.

4.5 Any consequences resulting from violations of these regulations shall be the responsibility of the accountable party.SJCAdministrative sanctions will be imposed, up to and including legal liability, depending on the severity of the offense.