LEGRAND_REGISTRATION_DOCUMENT_2017

CORPORATE SOCIAL RESPONSIBILITY (CSR)

Offering users sustainable solutions

Processing of personal data Legrand undertakes to respect the privacy of its customers, partners, managers and employees, to protect their personal data, and to process that data in accordance with the applicable rules and laws. Legrand is mindful of the wider context of the digitization of the economy and the rapid development of connected objects. To address these new issues, the Group has appointed a Chief Digital Officer and has set up the Eliot program to develop interoperable and connected objects and solutions offering sustainable benefits for consumers and professionals. True to its policy of development in accordance with the prevailing standards and regulations, Legrand relies on the work currently being done on the subject of data (ISO 27001) and listens to customer-users based on the three pillars of digital trust: utility, security and privacy. Given the close link that exists between utility, security and privacy, Legrand is involved in and promotes the work of digital economy association ACSEL, the French hub for digital transformation. The Internet of Things (IoT) means that more and more personal data are being processed. In this respect, Legrand remains true to its values and considers it paramount to respect the users of its products. With this in mind, Legrand has introduced an approach promoting the Eliot (Privacy by Design), a program that promotes data protection and security from the development stage of connected objects, thus anticipating the entry into force of the EU General Data Protection Regulation (GDPR) expected in May 2018. In particular, security audits and regular intrusion tests are carried out by Legrand or by leading cybersecurity companies. These are conducted in the form of simulation of hacking throughout the process, from software development to production. Legrand also implements PIAs (Privacy Impact Assessments) to measure and minimize the impact of personal data processing on users’ privacy. Finally, Legrand takes particular care in handling its employees’ data, and in 2016 introduced internal company rules for transfers of data outside Europe.

The Group is a member of associations that prepare principles for voluntary communication and codes of conduct, including for example the Union des Annonceurs (UDA) and the Utenti Pubblicità Associati (UPA), which are the advertisers associations in France and Italy, respectively. These associations comply with a range of European and national regulations, including: W ICC Code no. 240-46/557 of February 3, 2010: Framework for responsible environmental marketing communications, and the consolidated ICC Code of advertising and marketing communication practice; W the Charter of commitment and objectives for responsible advertising of the French Ministry of Ecology, Energy, Sustainable Development and Territorial Development, the Secretary of State for Industry and Consumption and the French Advertising Standards Authority (BVP); W the Self-regulatory Commercial Advertising Code ( Codice di Autodisciplina della Comunicazione Commerciale ) of the IAP ( Istituto dell’ Autodisciplina Pubblicitaria ) in Italy. The UDA has also established an advertising self-regulatory authority, the ARPP, which is tasked with responding to cases of non-compliance with established principles and codes. The Group undertakes to respect the ARPP’s decisions, for example with regard to advertising submitted ahead of campaign launches. The UDA has published the Responsible Advertising Charter, a checklist for responsible communication aimed at marketers, as well as a charter setting out standards for the respectful portrayal of people in advertising, which is recognized by the French Ministry for Solidarity and Social Cohesion. The UDA has been a member of the Global Compact since 2004, but is also a member of the WFA (World Federation of Advertisers) and of two programs: “Responsible Advertising and Children Program” and the “Responsible Marketing Pact”.

04

81

REGISTRATION DOCUMENT 2017 - LEGRAND