2024 universal registration document

3. Risk factors and management

Operations-based versions of these guides, designed for specific target audiences and containing specific procedures, have been put in place. In 2024, two policies that round out the Employee Guide – Gifts/Invitations were drawn up for the Public Affairs teams and for sponsorship operations.

Corruption prevention measures implemented within the Group
Group-level risk assessment

The risk of corruption is included in the Group risk assessment. Following the update in 2023, which used a dedicated methodology, the Group has 79 corruption risk maps covering all the countries in which it operates.

A tool also enables Country Managers to assess and analyse possible local ethical risks (including corruption) and to take the necessary prevention measures.

Specific Human Relations procedures In the annual appraisal system for all employees, overall performance includes the employee's achievements in compliance with the Code of Ethics and the Group's ethical principles.
Speak Up system Speak Up enables employees to express any concerns they may have, particularly with regard to corruption, via a secure website or directly to the Group's Chief Ethics, Risk and Compliance Officer. Any allegation raised in good faith is examined in detail. In the event of non-compliance with the anti-corruption policy, corrective measures are taken, which may include disciplinary action. The whistleblowing line was opened to employees in 2008, and then to stakeholders in 2018.
Learning

A compulsory online learning programme on the prevention of corruption, available in 13 languages, has been rolled out in all countries. As at 31 December 2024, this programme had been completed by 90% of the employees concerned.

In accordance with L'Oréal's corruption risk mapping, specific learning courses for the staff most exposed to the corruption risk are developed and deployed within departments and entities.

Control and assessment of measures and procedures dedicated to the prevention of corruption

The Group's Internal Control process provides for control procedures on operational activities, in particular for the separation of tasks. The implementation of the corruption prevention programme is part of the Internal Control self‑assessment process rolled out in operational entities.

The effectiveness of the corruption prevention programme is reviewed via accounting controls performed on a regular basis, and through targeted second-tier verifications of the programme’s procedures and systems.

The system for monitoring the corruption prevention programme is based on the three levels of control and covers all the measures in the programme.

L'Oréal's Internal Audit teams are particularly vigilant in this respect. Implementation of the corruption prevention programme is systematically reviewed during audit assignments, using a dedicated audit guide which contains specific checks. Individual interviews are conducted separately with the Country Manager and the Chief Financial Officer. They give rise to an individual report reviewed and signed by these latter persons. Specific audits may also be conducted as part of the annual audit plan.

Due diligence procedures prior to acquisition projects or minority or majority investments

A specific corruption risk procedure integrates appropriate and proportionate checks at the different stages of the acquisition or investment process.

Responses to the ethics questionnaire submitted to target companies are intended to identify whether corruption risk prevention has been taken into account by the companies, and to prepare for integration or collaboration, as applicable.

Third-party due diligence

The third-party management process (clients/suppliers/philanthropic arrangements) includes the corruption risks both when entering into and during a relationship. A corruption risk assessment is carried out on the Group’s third parties. Appropriate verifications are implemented, which rely primarily on a dedicated tool and risk analysis guide.

A guide and specific procedure have been made available to employees concerning relationships between intermediaries and public authorities.

Real estate projects are also subject to a specific process.