TPK takes integrity as its most important value and promotes sustainable development with high-quality products and professional services. TPK Group develops forward-looking technologies, is committed to the research and development of touch technology and new business products.

Key Matters and Stakeholders

———————

In response to evolving sustainability practices and indicator trends, the Sustainability Committee of TPK Group developed a list of sustainability themes based on GRI standards, focusing on key domestic and international sustainability issues and industry priorities. Drawing on the GRI 2 and GRI 3 guidelines for identifying substantive themes as well as the dual-importance principle of IFRS S1, the committee designed and released a 2025 ESG Major Theme Survey Questionnaire to assess and identify key ESG topics for 2025. The overall analysis process is as follows:

Note 1: In response to evolving sustainability practices and indicator trends, three new topics were added in 2024, bringing the total to 19 sustainability topics for stakeholder engagement and human rights due diligence. A final assessment confirmed nine material topics for the year.

Note 2: Topics marked with “*” indicate newly identified material topics in 2024. Based on the results of the 2024 materiality survey and assessment, Occupational Health and Safety and Talent Attraction and Retention were included as material topics due to heightened stakeholder concern, and the report discloses relevant management approaches accordingly.

Information Security and Customer Privacy

———————

TPK continuously enhances its cybersecurity defenses and resilience through sustained investment in cybersecurity management and technical resources, thereby supporting the company’s ongoing business growth. This approach enables effective proactive prevention, facilitates swift response and mitigation when cybersecurity incidents occur, and helps minimize their impact on the company’s financial and operational activities. it has established the Information Security Management Policy and adheres to the ISO/IEC 27001 international information security management system framework, which employs the Plan-Do-Check-Act (PDCA) cycle methodology. In 2025, we obtained ISO 27001 certification, implementing a multi-layered defense-in-depth information security defense architecture. The company regularly conducts information security risk assessments, organizes regular professional training sessions for IT personnel, provides general information security awareness training for all employees, and delivers specialized personal information protection training for every employee. In 2025, the group’s IT Department also obtained ISO 27001 certification, continuously strengthening its information security management systems and technologies—including mechanisms such as pre-incident security safeguards, during-incident emergency response procedures, and post-incident recovery operations—to ensure their appropriateness and effectiveness.