Information technology is developing rapidly, and the overall business environment is changing quickly. In addition to diversifying our business operations, digital transformation is also accelerated to provide more complete and convenient data services. However, this is accompanied by increased information security risks. Therefore, Chunghwa Post established an Information Security Officer (concurrently held by the vice president or an individual of equivalent level), Cyber Security Office, and the Information Security & Personal Data Protection Committee to coordinate the promotion of information security and personal information solutions and maintain information security and the normal operation of information security and the personal information management system to ensure that our core cyber communication system can achieve the goals of confidentiality, integrity and availability, thereby safeguarding the customer privacy and reducing security risks.

To ensure that information and information systems related to postal savings and remittance services are properly protected, Chunghwa Post has obtained third-party certification by BSI for its Information Security Management System (ISO 27001) and continues to strengthen its information security management mechanisms. There are a total of 47 measurement indicators for the information security effectiveness of the postal savings and remittance system. The statistical results of relevant indicators in the 2025 measurement cycle have all reached the set goals.

Moreover, all information equipment has safety control measures, including regular update of password, allowing USB flash drive to read instead of to write, controlling the computer authority for software installing and so on. In addition, social engineering drills are held regularly, and phishing emails are sent to test our associates’ awareness of information security protection. A total of 4 social engineering drills were held in 2025 with 10 test emails sent to all employees at each drill, with the pass rate of 99.06%. Information security education and training are strengthened to those who failed the tests.

For the purpose of protecting the rights of customer data subjects, a Personal Information Management System (PIMS) (BS 10012) was introduced and certified and the Privacy Information Management System (ISO 27701) have been Implemented and certified by the third-party verification body (BSI) to maintain the validity of the certificate to reduce any possible impact and risk brought by a personal data infringement event. According to the statistical results in the measurement period in 2025, all the 8 indicators have reached the targets. There were no confirmed incidents of information leakage, theft, or loss of customer data in 2025.

To ensure the safety delivery of mails, reduce the risk of mis-delivery, and protect the rights and interests of senders and recipients, Chunghwa Post operates in accordance with the rights and responsibilities conferred by the Postal Act and international postal regulations in the mail delivery and counter collection operations. Providers of mail acceptance or delivery services shall display their names, trademarks, or other identifiable marks on the envelop of the mail item. However, mail items without the recipient’s name and address may be exempted from the marking requirement. All mail delivered is stamped or marked with a “postage paid” symbol on the envelop in accordance with regulations. When recipient verification is necessary to ensure accurate delivery and avoid disputes, the recipient may be requested to provide valid identification. In specific situations, a traceable signature or receipt record may be maintained. At the same time, as part of its legal obligations to provide universal postal services, Chunghwa Post processes personal data within the legally authorized scope to ensure secure and consistent operation of such services.