Article 1 In order to standardize the collection and outsourcing of personal loan risk assets of the Bank, improve the collection performance and optimize the risk asset structure, these Measures are formulated in accordance with the Guidelines on Outsourcing Risk Management of Banking Financial Institutions, Measures for Outsourcing Risk Management of Bank of China Limited (Version 20 19) and other regulatory provisions and internal rules and regulations.

Article 2 The term "collection outsourcing" as mentioned in these Measures refers to entrusting the collection of personal loans to collection outsourcing service providers other than banks, including collection service companies and law firms.

Article 3 The payment and settlement of outsourcing fees must meet the relevant requirements of the financial accounting system.

Chapter II Conditions for Collection and Outsourcing

Article 4 In principle, when the following conditions need to be met at the same time, the collection work can be entrusted to the collection outsourcing service provider:

(1) Personal loan risk assets are divided into "concerned" and above (concerned, secondary, suspicious, loss, written off) credit accounts, or risk assets that are judged as high-risk accounts and need to be outsourced for collection.

(2) The collection outsourcing service provider to be entrusted has professional advantages such as technology, personnel and experience in a certain collection field, and meets the relevant system requirements of the Bank such as asset preservation and information protection.

Article 5 Cost-benefit analysis is required for outsourcing collection.

When calculating the cost-output ratio of collection outsourcing according to the collection rate, the recovery rate prediction of collection outsourcing should not only consider the past performance level of collection outsourcing service providers, but also refer to the average recovery rate of the same industry market.

Article 6 Collection outsourcing only refers to assisting the collection of personal loan risk assets from the collection outsourcing service provider, and the handling bank still needs to strengthen the management of entrusted collection risk assets and bear the ultimate responsibility for their asset quality.

Chapter III Basic Qualification Requirements for Solicitation of Outsourcing Service Providers

Article 7 Basic qualification requirements for qualified outsourcing service providers.

(1) An independent legal person registered in People's Republic of China (PRC), complying with national laws, having valid industrial and commercial tax registration, having independent civil liability and the ability to provide corresponding services, and having been established for not less than three years (inclusive) and having more than two years of practical experience in collection.

(2) The registered capital shall not be less than100000 yuan or equivalent foreign currency.

(3) The business scope includes at least one of the following: personal post-loan management and preservation, credit default notice, notice reminding service, information consultation, credit risk management, commercial account risk management, financial business process outsourcing, etc.

(4) The collection outsourcing service provider shall have a fixed office and provide the bank with the property right certificate or lease contract. You must equip yourself with all kinds of necessary office equipment to meet business needs, electronic equipment and collection system needed for collection business, and the operating system should have the function of recording incoming and outgoing calls and recording electronic files.

(5) Perennial legal counsel and not less than 8 full-time business personnel familiar with personal loan business shall provide the letter of appointment of legal counsel and a copy of lawyer's practice license, and shall provide the labor contract of full-time business personnel, the social security payment certificate stamped by the social security department and the certificate of no criminal record issued by the public security organ, and the employees shall remain relatively stable.

(6) Having a sound internal management system or internal control system, effectively controlling the professional ethics risks and operational risks of employees, and having a detailed and complete collection workflow and working standards.

(seven) must have good industry performance and experience, and there are successful cases of providing similar services in state-owned banks, joint-stock banks or consumer finance companies with consumer finance licenses.

(8) The collection outsourcing service provider and its main controller/shareholder have not been notified by the regulatory authorities, punished or exposed by the media for vicious collection in the past two years, and must provide relevant commitments.

(9) Collection outsourcing service providers must be able to meet the basic requirements of providing quality services to our customers, and be willing to accept our continuous management, business counseling, special training and performance supervision.

(X) The acquiring outsourcing service provider shall establish an emergency plan that meets the requirements of the Bank. The emergency plan shall be compatible with the management requirements of the Bank's emergency plan, and the plan shall effectively prevent or mitigate the risks that may be brought by unexpected situations.

Chapter IV Implementation Process of Collection Outsourcing

Article 8 The Head Office shall be responsible for the unified procurement of collection outsourcing service providers at the head office level. The tier-one branch is responsible for the unified procurement of outsourcing service providers within its jurisdiction, and the tier-one branch shall not hand it over to the authorized handling bank.

Article 9 The centralized procurement department of the Head Office and tier-one branches shall conduct procurement work in accordance with the Bank's Procurement Management Measures and other relevant procurement rules and regulations. After the procurement work is completed, the branch shall report the list of outsourcing companies to the Business Line Management Department of the Head Office.

Article 10 Sign the entrustment outsourcing agreement.

If the head office or tier-1 branches outsource the collection, they shall sign a written contract or agreement with the service provider as soon as possible after the procurement of the outsourced project is completed. Outsourcing projects are prohibited from subcontracting, subcontracting or subcontracting in disguised form.

Article 11 A collection outsourcing contract or agreement shall require the collection outsourcing service provider to undertake the following matters:

(1) Inform the outsourcing activities on a regular basis.

(two) timely notification of emergencies in outsourcing activities.

(3) to cooperate with and accept the inspection by the banking regulatory agency.

Four. Ensure the security of customer information. When customer information is unsafe or customer rights and interests are affected, the bank can terminate the outsourcing contract at any time.

(5) Do not engage in activities beyond what is agreed in the contract or agreement without authorization, and do not engage in activities in the name of the bank.

(six) other matters that should be promised.

(7) Principles and methods of fee payment, and it is necessary to ensure that the items and payment methods of outsourced services comply with the relevant provisions of the bank on financial accounting management.

Article 12 The head office and branch shall formulate an emergency plan for this outsourcing business according to the requirements of the Overall Emergency Plan of Bank of China and the Measures for the Management of Outsourcing Risks of Bank of China Limited, so as to deal with and solve emergencies in the outsourcing process and ensure the normal development of this business.

Chapter V Principles of Collection Outsourcing

Article 13 The principle of legality and compliance

Collection outsourcing service providers must ensure that the collection methods adopted are legal and compliant, and shall not collect in an illegal, illegal or immoral way. At the same time, no collection shall be made in the name of Bank of China, and no words or deeds may damage the image and reputation of Bank of China.

Article 14 The principle of unilateral rescission of a contract

In the process of customer gathering, if the outsourcing service provider violates the relevant regulations, causing customer complaints and media exposure, or causing reputation risks, or other acts that damage the legitimate rights and interests of the bank and customers, the bank has the right to unilaterally terminate the outsourcing cooperation at any time.

Article 15 The principle of reserving the right to make business decisions

If the following special events (but not limited to) occur during the collection, we must obtain the written authorization and consent of the bank in advance:

(1) Matters applied by the debtor. Including but not limited to: relief of late payment fees, relief of interest, paying debts in kind, disposing of collateral, debt restructuring, etc.

(2) To file a lawsuit on behalf of the bank, acknowledge, waive and change the litigation request, settle, participate in and accept court mediation, file a counterclaim, withdraw the lawsuit, appeal and other matters.

(3) Other matters that may lead to the loss of creditor's rights or the change of rights and interests of the bank.

Article 16 The principle of work handover

(1) The bank shall, according to the scope of entrusted collection stipulated in the contract or agreement on outsourcing of collection, and in combination with the actual situation of the debtor's assets, determine the account of the debtor who needs outsourcing of collection, provide necessary customer information, and handle the written handover registration formalities at the same time.

(2) After the collection, the collection outsourcing service provider shall hand over the collection records, letter stubs, receipts, receipts and other relevant materials to the Bank for safekeeping for at least three years.

Article 17 The principle of data confidentiality

The handling bank shall arrange a special person to be responsible for the provision and recovery of customer information, and do a good job in filing and registering personnel, and do a good job in handover procedures before personnel changes. Customer data should be provided through encrypted mobile storage media. Conditional branches should adopt scientific and technological means such as data interface to strengthen the confidentiality management of customer data.

Collection outsourcing service providers should strictly abide by the collection outsourcing contract or agreement and fulfill the confidentiality responsibility of customer information. At the same time, the Bank shall establish a management mechanism for collection of outsourcing service providers, and inspect and supervise the confidential implementation of customer information: