Overview

 

Human rights are fundamental freedoms that must be equally and fairly applied to every individual regardless of race, gender, nationality, religion or any other personal characteristics. As a responsible business, we have a duty to uphold international human rights laws and standards across all aspects of our operations, supply chains, and business relationships i.e clients and suppliers.

 

This includes promoting fair labour practices and treating all communities with respect, not only as an ethical obligation but also as a social license to operate. By adhering to these principles, we aim to build our reputation as a responsible corporate citizen, which will help to build stakeholder trust for years to come.​

 

We acknowledge that human rights concerns cannot be addressed in isolation from environmental issues. The right to a safe and healthy environment is increasingly being recognised and established by countries, regulators, and lawmakers as a fundamental human right. As such, CIMB’s human rights management incorporates environmental considerations, ensuring a holistic approach to safeguarding the well-being of individuals and communities.

 

Governance​

 

Human rights is a material matter to CIMB and is of great importance to our Board and top management. The ultimate responsibility for human rights lies with the Board of Directors and the Group Sustainability and Governance Committee of the Board. At the management level, the Group Chief Sustainability Officer, overseen by the Group Sustainability Council (GSC), is responsible for managing human rights risk as a key element of Sustainability Risk at CIMB.

 

Implementation of our Human Rights policy extends to all aspects of our business and is executed by business units and business enablers:
 

  • Group Sustainability oversees the implementation of the Human Rights Policy and Procedure across all aspects of our business, with the support and collaboration of Business Units and Business Enablers. Group Sustainability conducts control testing on these policies and procedures to proactively identify areas for improvement

  • Group Corporate Assurance Division conducts periodic audits to maintain accountability and effectiveness of our policies

  • Relationship Managers from the various lines of business conduct Basic Sustainability Due Diligence, which includes a human rights due diligence, on clients in compliance with our Group Sustainability Financing Policy. For cases where a high risk of human rights is identified, Group Sustainability conducts an Enhanced Sustainability Due Diligence

  • Group Strategic Procurement conducts and oversees the sustainability due diligence, including human rights due diligence, on vendors/suppliers during the RFP process and during onboarding of new vendors whereby vendors/suppliers are required to acknowledge the Vendor Code of Conduct

  • CIMB Foundation and our Corporate Social Responsibility function conducts the sustainability due diligence when onboarding new partners

  • Group Human Resources manages human rights complaints received related to employees and unions

Our Group Human Rights Policy

 

Our Human Rights policy provides guidance on identifying, assessing, and managing salient human rights risks that present the most severe potential negative impacts.

 

The policy aims to provide clarity and transparency on human rights management across the Group. This is to ensure consistency between internal practices and external expectations, including legal and regulatory obligations and voluntary commitments to respect and protect human rights. Within the broader scope of human rights, we focus on issues and risks that are most pertinent to our operations and activities. Our policy not only covers requirements for our own operations, but also encompasses requirements for our business relations such as our clients, suppliers and partners. The policy has been rolled out across the Group in 2023. Read our Group Human Rights Policy here.

 

CIMB commits to continuous human rights due diligence to identify, prevent, and mitigate adverse human rights impacts identified across the Group through collaborations with our stakeholders. This is done on a risk-based approach, with the greatest attention paid to the areas of greatest risk to the Group, and most salient impacts on people, and in particular, vulnerable groups. For example, we engage with our clients who have a large number of migrant workers in Malaysia, to understand their worker practices, and their own human rights policies, due diligence mechanism, and grievance mechanism.

Commitments and Frameworks​

 

We commit to uphold and comply with:​

 

i. The International Bill of Human Rights, including the Universal Declaration of Human Rights (UDHR), International Covenant on Civil and Political Rights (ICCPR), and the International Covenant on Economic, Social and Cultural Rights (ICESCR);​

 

ii. UN Guiding Principles on Business and Human Rights;​

 

iii. ILO Declaration on Fundamental Principles and Rights at Work;

 

With regards to labour rights, we commit to the following: ​

 

i. Avoid causing or contributing to labour rights violations as per national legislation standards. In the event where there is a discrepancy between national, regional, and international standards, we will engage with stakeholders to explore approaches that respect international standards.​

 

ii. Respect the rights of our employees, including:​

a. freedom of representation; ​

b. right to collective bargaining;​

c. a safe and healthy work environment, including safety from any forms of harassment such as sexual harassment;​

d. fair recruitment and other people practices;​

e. preventing modern slavery; and​

f. respecting regulations on minimum wage and maximum working hours.​

 

iii. Eliminate discrimination in the workplace and promote diversity and inclusion.​

 

iv. Avoid contributing to, and assist in the prevention of human trafficking. 

 

Our framework further adopts principles and recommendations laid out in recognised international, regional and local frameworks, including:​

 

i. The UN Environment Programme Finance Initiative Principles for Responsible Banking;​

 

ii. UN Sustainable Development Goals;​

 

iii. Bank Negara Malaysia’s Value-Based Intermediation Financing and Investment Impact Assessment Framework and Association of Banks in Malaysia’s ESG Principles​

Our Policy in Action ​

   Employees

We continue to maintain a strong emphasis and commitment to ensure that the rights of our employees are protected. This includes their freedom of association as well as regulatory labour rights. We regularly engage employees through focus groups, surveys and engagement with representative organisations such as employee unions, amongst others. 

The integration of human rights considerations into our financing procedures has become a requirement and a key element in our risk assessment process. We conduct sustainability due diligence, including human rights due diligence, on our non-individual clients. Where a client is considered to have high human rights risk, we request that clients have in place commitments and processes to mitigate these risks. In case of non-compliance with our human rights requirements, clients are requested to implement corrective action plans.​​

   Suppliers

Guided by international standards and frameworks including the United Nations Guiding Principles on Business and Human Rights, we assess actual and potential adverse human rights impacts and how we may have directly caused, contributed, or linked to an abuse of rights within our supply chain.​We conduct sustainability due diligence on our vendors and suppliers as well as require vendors to acknowledge CIMB's Vendor Code of Conduct (VCOC). Both the due diligence and VCOC include human rights aspect. Where we identify high human rights risk by a vendor, we will use our leverage to influence them towards the standards outlined in this Policy. 

Taking Action and Providing Remedy: CIMB Human Rights and Environmental Grievance Mechanism

 

Aligning with the third pillar of the United Nations Guiding Principles on Business and Human Rights (UNGPs), our Grievance Mechanism serves as a structured process to address and resolve human rights and environmental concerns effectively and transparently.

 

Our Grievance Mechanism is open to all, including CIMB employees, employees of our suppliers and clients, and communities affected by CIMB's operations or those of our business partners, such as indigenous peoples or communities living near a client’s facility. This inclusivity aligns with the UNGPs, which emphasise the responsibility of businesses to address adverse impacts linked to their operations, products, or services, whether directly or through their business relationships. By providing a platform for all stakeholders, we aim to uphold transparency, accountability, accessibility and and fairness in addressing human rights complaints.

Channels​
 

The channels below are categorised based on their availability to different groups of complainants.

Complainants by groups Channels  
All complainants

Email to sustainability@cimb.com;

 

Submit a feedback form through the CIMB website here.

 

Email to whistleblowing@cimb.com OR send via post to the Chairman, Group Audit Committee, CIMB Group Holdings Berhad at 17th Floor Menara CIMB, No. 1 Jalan Stesen Sentral 2, Kuala Lumpur. This is only for wrongdoing of a CIMB employee.

 
Complainants who are current and former employees

Email to epicc.culture@cimb.com;

 

Email, phone or write directly to Chairman of CIMB Group Holdings Berhad, Group Audit Committee, Group Chief Executive Officer, Group Chief People Officer and/or Group Chief Internal Auditor, based on the nature, type or category of human rights complaint to be made;

 

"Have Your Say" mailbox;

 

Grievance process as provided in the respective Collective Agreements signed with unions.

 
Complainants who are current and former supplier, including their employees During supplier engagement sessions.  
Scope​
 

The following criteria will determine whether a complaint is admitted into CIMB's Human Rights Grievance Mechanism:

 

1. Relevance: The complaint must involve an alleged negative human rights impact related to CIMB Group’s operations, lending/financing activities, or business relationships (e.g., clients and suppliers). Please refer to the table below for examples of issues that do not meet the negative human rights impact requirement. 

Complainants  Examples of non-human rights complaints (non-exhaustive)  
CIMB employees/ Employees of CIMB’s clients/ Employees of CIMB’s suppliers

Disagreements over performance reviews, promotion decisions and/or benefits;

 

Disputes on compensation that do not relate to discrimination due to personal characteristics such as gender and race;

 

Complaints on workplace conditions that are purely for comfort and not a violation of human rights such as ergonomic chairs and lighting.

 
CIMB non-individual clients

Dissatisfaction with regards to products or services rendered;

 

Disputes over contract terms.

 

 
CIMB suppliers

Dissatisfaction over onboarding and RFP processes;

 

Disputes over contract terms.

 
Communities

Noise or traffic issues due to a CIMB client’s industrial or commercial activities;

 

Concerns that a CIMB client’s development or business activities may negatively affect local property values;

 

Concerns on economic competition of new businesses to local businesses;

 

Aesthetic concerns stemming from the construction of new buildings.

 

2. Eligibility to Lodge a Human Rights Complaint: A human rights complaint can be submitted by the right-holder (the individual whose rights are affected) or their representative. Representatives may include not-for-profit organisations, civil society organisations, or legal firms, and complaints can originate from any country.

3. Timing of the Incident
: If the human rights complaint is against an external party with a business relationship with CIMB, the alleged human rights violation must have occurred during the time CIMB maintained that relationship.

4. Consent from Business Relations
: CIMB is bound by the confidentiality provisions of the Banking and Financial Institutions Act 1989 and cannot disclose our business relationship with a client without their consent. Therefore, in cases where complaints are related to our clients, CIMB must obtain the client’s consent before disclosing to the complainant whether the case is accepted into the Grievance Mechanism process. However, CIMB will still proceed with an internal investigation of the matter as part of its human rights due diligence on the business relationship.

5. Vexatious Complaints
: Human rights complaints deemed vexatious (intentionally harassing, or disruptive without a legitimate purpose) will not be admitted. This determination will be made by the Human Rights Lead and approved by the Group Chief Sustainability Officer (GCSO).

6. Escalating Complaints:
CIMB Human Rights and Environmental Grievance Mechanism is part of a broader complaints landscape, including CIMB's internal employee grievance mechanisms and Anti-Money Laundering (AML) mechanisms. If a more relevant complaints process exists, the complaint will be escalated to the appropriate channel to ensure it is addressed in the most effective and suitable way.

7. Court Cases
: If the human rights complaint is subject to an ongoing court case, CIMB will defer processing the complaint until the court case is concluded.

 

If a complaint falls outside the scope of this mechanism, CIMB will inform the complainant of its non-acceptance and provide guidance on other potential avenues for resolution.

Stage  Process  
Receive

A human rights complaint is received through any of the channels shared above. 

 
Assess

The human rights complaint is assessed against the scope listed in the section above to determine its eligibility for acceptance.

 

For complaints involving a non-individual client, CIMB will seek their consent to disclose the relationship and participate in this Grievance Mechanism.

 

The complainant will be informed accordingly on the status of acceptance of the complaint.

 

 
Investigate

CIMB will investigate the human rights complaint, striving to engage in dialogue with the complainant or their representatives as well as our business relations (where applicable) throughout the process whenever possible.

 
Respond

We will provide the complainant with periodic written updates throughout the process.

 
Remediate If CIMB determines that we have caused, contributed to, or are linked to any adverse impacts, we will strive to remediate the impact in alignment to the extent of our contribution and accountability.   

We aim to resolve complaints within 12 months. However, this timeline does not include the implementation of any remediation measures, which will vary on a case-by-case basis depending on the complexity and nature of the issue.

Remediation
 

Central to our remediation efforts is prioritising the rights-holder’s interests, while ensuring feasibility within the bank’s regulatory and contractual obligations. Remedies may include apologies, restitution, rehabilitation, financial or non-financial compensation, as well as the prevention of harm.


When we discover that a human rights abuse has taken place, we will take appropriate steps to ascertain whether we have caused or contributed to the adverse human rights impact.

 

  • When we have directly caused these impacts, we are responsible for resolving the issue and providing remedy.
     
  • Where we have contributed to an adverse human rights impact, we will provide mechanisms through which grievances can be raised and strive to contribute to remediation, where necessary and appropriate, ensuring no penalty, dismissal or reprisal.
     
  • Where we have not caused or contributed to an adverse impact, but are directly linked to it through our products, operations or services, we recognise that we are able to play a role in remediation, for example, by engaging with our clients about their own grievance mechanisms and remediation pathway.