Integrity and Compliance-Corporate Governance-Taipower Sustainability Section - Taiwan Power Company

loading 3

Read more

Ethical Code

 
All personnel

All Employees

 

Must comply with the Code of Ethics for Employees under the Ministry of Economic Affairs and the Directions on Lobby Registration and Checks for the Executive Yuan and its Subordinate Agencies. Employees may consult with the Department of Civil Service Ethics for clarification or support,with full protection of their rights.

Procurement personnel

Procurement Personnel

 

Must follow the Ethical Guidelines for Procurement Personnel and the Points of Attention for Interactions between Procurement Personneland Vendors. Training and consultations are regularly provided to ensure fairness, transparency,and integrity in procurement activities.

Management

Management

 

Must review suspected misconduct cases in a fair and timely manner.Taipower enforces accountability for both directly involved personnel and responsible supervisors to reinforce the principles of ethical corporate governance.

Anti-Corruption Measures

 

As a state-owned enterprise,Taipower follows the Executive Yuan's National Integrity Building Action Plan by executing corresponding policies and implementation measures. The Company promotes internal anti-corruption efforts,fosters consensus on integrity with the private sector,and holds itself to the highest standards of ethical conduct.

Promotion of Anti-Corruption Campaigns

Promotion of Anti-Corruption Campaigns

 
  • Integrity Committee Meeting:The annual Integrity Committee meetings were convened; outcomes were disclosed on the official website to supervise the implementation of the integrity plan.
  • Internal:Integrity policies were promoted to employees to raise anti-corruption awareness, and a cleanliness survey was conducted. Training activities held in 2024 included issuing an e-newsletter on integrity,employee project-based integrity briefings,integrity seminars, corporate integrity seminars,and online courses.
  • External:Vendor sessions were conducted to advocate anti-bribery regulations and ensure fair business conduct.

Compliance

 

Taipower is a state-owned public utility and its operations are governed by the Company Act, Securities and Exchange Act, and other general laws and regulations, in addition to the Administrative Law for State-Owned Enterprise and the Electricity Act. Therefore, the establishment of Taipower's organization, accounting, auditing, budgeting, business planning, utility rates, and its development and management of electricity resources must be approved by the Ministry of Economic Affairs. Specifically, the Ministry's State-owned Enterprise Commission is responsible for supervising and managing the various operations at Taipower. The Bureau of Energy is the regulatory authority for the electricity industry, and is responsible for communicating and transmitting relevant instructions to other ministries, such as the National Development Council, or the National Audit Office. The implementation of corporate policies must comprehensively account for the provisions of various laws and regulations and their impacts on policy development.

Legal Compliance and Awareness Campaigns

 

In an effort to boost employee awareness of the Company’s legal affairs and to ensure compliance, the Legal Affairs Office organizes multiple sessions of the Practical Legal Issues – Case Studies and Solutions Seminar at different units along with other training events each year. The office also provides legal consultation services to help units address and resolve legal issues in their operations and to ensure that all employees abide by the pertinent regulations.。

推動守法宣導
產品責任與個資保護

Product Responsibility and Personal Information Protection

 

Taipower's main product is electricity. Electricity prices and payments must be handled in accordance with government laws, regulations, and policies. As such, Taipower deals with all customer information, electricity payments in arrears, and suspension of electricity services in accordance with the Personal Information Protection Act and the Electricity Act. Taipower conducts an annual inventory of personal data files and systems, reviews necessary fields, and revises relevant business regulations. For the confidentiality of customer-related data, Taipower has formulated a confidentiality mechanism and operations method according to different targets. It abides by the regulations on the handling of personnel data by various units to ensure the protection of customer data related to business execution. For example, to prevent inadvertent leakage of a customer’s personal information and violation of law by the service personnel that fail to follow the operations method, Taipower has stipulated handling procedures to check the identification of applicants or to verify their IDs when the personal data of customers or their entrusted persons are involved during the power consumption inquiry process. These inquiries may be made through face-to-face encounters, via telephone, fax, online query, or by printing out the results of such queries. For important databases, Taipower has established a database activity monitoring system to audit and protect data.

Information Security Protection Plan

 
Information Security Protection Plan
IT assets and critical IT infrastructure must be regularly inventoried, classified, and graded. Risk assessments will be conducted for important IT assets and critical IT infrastructure. The Company must implement appropriate protective measures based on the results of these risk assessments.
  • IT assets and critical IT infrastructure must be regularly inventoried, classified, and graded. Risk assessments will be conducted for important IT assets and critical IT infrastructure. The Company must implement appropriate protective measures based on the results of these risk assessments.
The collection, processing, and utilization of personal data must meet the requirements of the Personal Data Protection Act.
  • The collection, processing, and utilization of personal data must meet the requirements of the Personal Data Protection Act.
Unit supervisors must pay close attention to the identification and management of confidential and sensitive information. They are responsible for the supervision, implementation, and auditing of unit compliance with information security policies, related laws, and operational regulations. They must also ensure implementation in the units' routine operations and employees’ daily tasks.
  • Unit supervisors must pay close attention to the identification and management of confidential and sensitive information. They are responsible for the supervision, implementation, and auditing of unit compliance with information security policies, related laws, and operational regulations. They must also ensure implementation in the units' routine operations and employees’ daily tasks.
The Company will establish comprehensive reporting and emergency response measures for information security incidents and hold regular information security drills to ensure continuous business operations.
  • The Company will establish comprehensive reporting and emergency response measures for information security incidents and hold regular information security drills to ensure continuous business operations.
All employees will be fully aware of the purpose of the information security policy and their duties.
  • All employees will be fully aware of the purpose of the information security policy and their duties.
• The Company will regularly review the effectiveness of the information security management system.
  • The Company will regularly review the effectiveness of the information security management system.
The Information and Communication Security Policy and related operational regulations will be revised in accordance with changes in business operations, developments in information technology, and risk assessment results.
  • The Information and Communication Security Policy and related operational regulations will be revised in accordance with changes in business operations, developments in information technology, and risk assessment results.
Newsletter

Required

Required

Mailbox format error

Submit

Sending

Shipped Out

Failed to Send

Please check your network and submit again, if it continues to happen, please contact the network administrator!