Environmental, Social, and Governance
Patient First, Medicine for Good
Continuously enhancing the company's overall ESG performance
Lean Governance
ESG Governance Structure
Gan & Lee Pharmaceuticals fully integrates the ESG principles into overall business operations and development strategy, and has established a three-tier ESG governance structure comprising "decision-making - management - execution". The Board of Directors serves as the highest decision-making body for ESG governance, and assumes ultimate responsibility for ESG-related matters. The Strategy Committee is responsible for overseeing and guiding the implementation of all ESG initiatives. At the operational level, the Sustainability Department leads ESG coordination, working in collaboration with core business departments to plan and organize ESG-related activities. The ESG-related departments of the headquarters and subsidiaries serve as execution teams, responsible for the implementation of specific ESG objectives.
Anti-Bribery
Gan & Lee Pharmaceuticals upholds the core values of integrity in business and compliant development, regards anti-bribery and anti-corruption as cornerstones of corporate governance. The company has established a structured governance framework based on "prevention first, combined prevention and enforcement, and full coverage" to ensure that all employees and business partners conduct their activities in compliance with laws and regulations, industry standards, and ethical principles.
Information Security
Gan & Lee Pharmaceuticals regards the construction of information security as an important responsibility and measure to protect enterprise and personal information. To enhance data governance and compliance capabilities, the company has established an integrated security system covering management, technology, operations, and compliance, thereby building a robust security defense line with a closed-loop mechanism of "Protection - Inspection - Response - Recovery".
Gan & Lee Pharmaceuticals has formulated and continuously improved core systems such as the "Cybersecurity Management Policy", "Data Security Management Policy", and "Information System Security Incident Emergency Response Plan" in accordance with relevant national laws and regulations, forming a full lifecycle management mechanism covering planning, construction, operations and maintenance, and emergency response, thereby providing systematic assurance for business continuity and stable operations.