Information Sharing Committee

Information Sharing Committee

Committee Officer: Tolga Alkan, Müge Dalkılıç

Type of Committee: Main committee

Subcommittee Type: Legal / Approved by Board Members

Committee's Aim / Responsibilities:

Particularly the shares that our bank will make with its main partner (“BBVA S.A”),

• Sharing with its own affiliates,
• Sharing with all 3rd (third) parties, including the shares with the credit institutions and financial institutions that our bank has a service relationship with,
• and our Bank's subsidiaries with BBVA S.A,
• To control the sharing of customer secret and bank secret information within the scope of our bank's legal regulations, to evaluate the appropriateness of the sharing requests and to record these evaluations.
• Within the scope of the BRSA's "Regulation on Sharing Confidential Information" dated June 2021:
• Evaluating data sharing requests addressed to our relevant units and making decisions regarding the sharing of these requests,
• Ensuring that requests are forwarded within the scope of certain forms and standards, through the system or by recording,
• To provide guidance and support to ensure that the data deemed appropriate to be shared is transferred in accordance with the bank's information and data security standards,
• To keep an inventory of all posts approved/unapproved by the committee,
• To determine data sharing rules with 3rd parties and to carry out awareness studies,
• To ensure that the legislative changes regarding data sharing are followed up and the changes are implemented within the bank.

Committee History: The Committee has established in September 2021.

Meeting Frequency: With the decision taken by the Information Sharing Committee on the relevant date, the evaluation of information sharing by our Bank that qualifies as bank and customer secrecy is carried out by the Legal, Compliance, Internal Control and Risk Management units through the Corpus, the application used by our Bank. When necessary, the Committee may also convene with the participation of the Board Member Responsible for Legal Services (to whom the Legal and Compliance units report), the Director of the Internal Control Unit, the Head of Risk Management, and depending on the nature of the information to be shared; the Head of Credit Risk Management.

Number of Meetings (2025) : 3 meetings were conducted.

Number of Meetings (2026) : 4 meetings were conducted. It will be convened when it is necessary.

Committee Members

(*) Participates in the meetings of the Committee as an observer and does not have the right to vote.