2022 Universal Registration Document

Chapter 4 : Social, environmental and societal responsibility

A Global Strategic Data Privacy Committee was set up to establish strategic guidelines and ensure the personal data protection programme is rolled out. Led by the Group DPO, this Committee is composed specifically of the Chief Financial Officer, the Chief Ethics, Risk and Compliance Officer, the Group General Counsel and the Chief Information Officer. For the sake of consistency and operational efficiency, a Steering Committee is in place for each Zone.

This governance ensures the Group’s compliance with different laws, such as the GDPR in Europe, the CCPA in California, the LGPD in Brazil, the PIPL in China or the POPI Act in South Africa. It ensures stakeholder involvement and that client, supplier and business processes are adapted to applicable local laws.

In order to comply with European rules, the Group has established a record of data processing performed in Europe. This tool is also offered in countries not subject to the GDPR that wish to use it.

In support of the privacy by design principle, the Group has deployed a digitalised tool that is available to operational staff. This tool helps them to ensure that a project complies with operational principles and rules relating to personal data protection from the very start and to carry out the required privacy impact assessments.

All employees within the Group have access to an awareness‑raising programme on the protection of personal data. Specific training is available for the main business lines. An Intranet site dedicated to this subject can be accessed at any time by all employees worldwide.

The Group Internal Control organises annual self-assessment of the implementation of the personal data protection compliance programme for all countries and business lines.

As part of the Group’s digital activities, the Internal Audit Department conducts audit checks on the protection of the personal data of consumers.

Since 2019, a specific audit programme on personal data protection has been aimed at all European countries that are subject to GDPR, which has been conducted by an independent auditor.

4.3.3.3. Measures taken in favour of consumers
Brand commitments L’Oréal encourages its brands to raise awareness and engage their stakeholders on the major environmental and societal challenges. Each brand must:
    • identify a specific environmental or societal cause of its own;
    • support a community partner involved in the field; and
    • conduct awareness-raising campaigns with its consumers (see section 4.3.1.3.2.).
Transparency and awareness
  • L’Oréal relies on its scientific teams to answer consumers’ questions about the ingredients in its products through its Inside our Products platform that came online in 2019. This platform is dedicated to providing information to consumers about the quality and safety of L’Oréal’s ingredients, requirements and processes. The website is available in five languages in 23 countries.
  • The “Trions en beauté” (Sort by Beauty) initiative is an awareness campaign conducted by the Group’s brands. The goal of this site developed by teams in France is to relay the extension of sorting instructions resulting from the AGEC Law & to raise consumer awareness of these same gestures applied to cosmetic products. In particular, it explains how to sort each of the different types of packaging for cosmetic products and the importance of recycling for our environment, and encourages everyone to act.
Product quality and safety Consumer safety is an absolute priority for L’Oréal. Assessing safety is central to any new product development process and a prerequisite before any new product can be brought to the market.(see section 4.3.1.3.2.).
4.3.3.4. Measures taken in favour of L’Oréal employees

L’Oréal has implemented several other policies that contribute to the respect of employees’ Human Rights and Fundamental Freedoms, notably through its policies on workplace health and safety, social dialogue and diversity, and its Share & Care programme (see section 4.3.2.4.).

The Group ensures that all employees receive at least the minimum salary set by local law or the applicable collective agreements, and that they receive a living wage(1) that covers their basic needs, calculated in line with best practices.

The subsidiaries must comply with applicable local legislation and the minimum set of core rules designed to prevent serious Human Rights violations. The details and implementation of these rules is described in L’Oréal’s Vigilance Plan (see section3.4.), which also explains the Group’s organisation in the area of Human Rights.

(1) Wages that cover basic needs, calculated in line with best practices and the support of independent experts.