Information Security and Privacy Protection
Information Security Framework
LG Display is committed to minimizing damage caused by internal information leaks and cyber attacks, and maintaining the company's competitiveness by responding to legal and contractual security requirements. To this end, we conduct security activities in accordance with our Information Security Management Policy, and establish information security standards and guidelines to ensure that all personnel involved in company operations, including employees, suppliers, and visitors, strictly comply with these standards and guidelines.
| Information Security Management Policy |
|---|
| LG Display recognizes information security as an essential element of corporate management and strives to maintain business continuity and build internal and external trust by adhering to the following Policy. |
| 1. All personnel handling company information are responsible for complying with security policies and standards and actively protecting information. |
| 2. Promote security culture policy through security training, inspections, and communication. |
| 3. Maintain appropriate investment and reasonable control levels for security. |
| 4. Faithfully comply with security requirements stipulated by law and contracts. |
| 5. Collaborate with partner companies to ensure that the entire supply chain maintains an equivalent level of security, and continuously improve security systems. |
Information Security Certification
LG Display has established an information security management framework aligned with the international standard ISO/IEC 27001, and we undergo annual certification audits to objectively validate its effectiveness.
Information Security Organization
LG Display protects the information of the company and its stakeholders by appointing a Chief Information Security Officer (CISO) and a Chief Privacy Officer (CPO) to oversee information security and personal information protection, and operates dedicated organizations for information security and personal information protection under their supervision. The Chief Information Security Officer establishes information security goals and policies, identifies security risks, and develops response measures, thereby continuously managing the company's overall security system. In addition, LG Display has established dedicated security organizations in its overseas subsidiaries to build and operate security framework optimized for the environment of each subsidiary.
Personal Information Protection Policy
LG Display’s personal information protection policy applies to all domestic and overseas corporations, joint ventures, suppliers, personal information processing contractors, and subcontractors. Personal data protection, which falls under the scope of corporate compliance management, is one of the key risk management areas in the annual compliance audits and compliance training programs. Additionally, through the legal system, we review whether personal information is handled during contract reviews with domestic and international subsidiaries, joint venture partners, suppliers, and contractors, and when contracts are signed, we obtain and manage personal information handling agreements. Furthermore, to protect the personal information of LG Display's employees, customers, and stakeholders, we have designated personal information protection officers for each organization and established a “Personal Information Processing Policy” based on personal information protection laws, ensuring that employees and business partners strictly comply with it. Additionally, we distribute a “Personal Data Protection Guide” and conduct regular training to ensure that all employees understand the importance of personal information protection.