Health and safety

The policy applies to the Parent Company Intesa Sanpaolo S.p.A. and, by virtue of the policy and coordination action exercised by it, to all Group companies.

From the Policy derives rules and processes applied at Group level which define Intesa Sanpaolo's approach to protect the health, safety and well-being at work of all its people as well as of the other external stakeholders impacted by the Group's activities (eg. customers and suppliers).

The basic principles reflect the requirements of the Consolidated Law on health and safety in the workplace (Legislative Decree 81/2008) and of the relevant mandatory legislation. The Policy is approved by the Employer for health and safety pursuant to Legislative Decree 81/2008.

The responsibilities and methods associated with the implementation, maintenance, monitoring and improvement of the Occupational Health and Safety Management System are outlined in the Process Guide – Compliance Management – Management of Occupational Safety Regulations, approved by the competent corporate functions. The activities described in the above-mentioned document and the procedures put in place make it possible to guarantee over time the ability to comply with current regulations and to pursue the principles and commitments declared in the company Policy on the subject. The Guide was produced with the goal of reducing the possibility of any harmful event occurring that impacts people, the environment and relevant external parties, monitoring risks in the operations of the company and suppliers involved in the company’s activities, and gradually improving the Group’s performance in occupational health and safety. The risks to the health and safety of Group’s people are evaluated according to a multidisciplinary approach, considering the combined effect of the working environment, processes and equipment as well as the subjective conditions of workers. The health and safety risk management process comprises the following phases:

• identification of dangers and their classification;
• risk assessment;
• identification and preparation of prevention and protection measures and procedures;
• definition of an action plan as part of a programme to guarantee the improvement of safety levels over time, with the identification of the competent company structures;
• realisation of the planned measures as part of the programme;
• definition of worker information and training programmes;
• monitoring of the implementation of the programmes and checks on the application and effectiveness of the measures adopted;
• management of residual risks.

The Guide specifically introduces operational health and safety checks for the identification, prevention and management of emergencies, implementing effective methods to prevent or minimise risks. In particular, it defines the procedures for the identification and appointment of emergency workers, the procedures for the performance of the tasks assigned for emergency management, the organisation and conduct of periodic checks and emergency drills. Furthermore, in order to monitor the risks from interference, the Guide specifically defines the obligations to be fulfilled regarding health and safety in the event of organisation of internal events or services, supplies and contracted works to be carried out at the Group’s offices by external suppliers or subcontractors. Among the safeguards envisaged by the Guide, in order to assess injuries, accidents and/or near misses in the workplace, the Occupational Medicine and Psychosocial Risks Office – which guarantees ever greater supervision of the activities related to occupational medicine (health surveillance, accident and occupational disease analysis, health emergency management) and psychosocial risks – submits a weekly summary of the accidents reported to the Prevention and Protection Office, which in turn activates the preliminary investigation. For each of the accidents and/or incidents reported by Supervisors, Emergency Coordinators, workers or Worker Safety Representatives (WSR), a verification activity is carried out by the Prevention and Protection Office. The activity includes the collection of all the factual elements both of a testimonial and documentary nature (e.g. description of activities, equipment used, companies involved, etc.) and, where necessary, the conduct of an inspection to identify the primary cause of the event and define any corrective measures to be taken.

Regarding the risk of workplace stress, the Group adopts a specific assessment methodology; a structured approach comprising two phases: a mandatory preliminary assessment based on objective indicators (sentinel events, job content, and work-related factors), and an optional in-depth assessment in cases of medium-high risk, which Intesa Sanpaolo deems appropriate.

In addition to ensuring compliance with current legislative and regulatory forecasts, the highest standards for health and safety are pursued through the implementation of a health and safety management system (SGSL) that complies with the requirements of the International Health and Safety Assessment Specification (ISO 45001). 
Intesa Sanpaolo has integrated the SGSL by obtaining certifications according to the ISO 45003 Guidelines, relating to the management of psychosocial risks and the promotion of well-being at work, and the Biosafety Trust Certification scheme (developed by RINA Services) for the prevention and control of infections and the protection of people's health from biological agents.

The HSE Management System Review meeting is held annually, in which the Top Management evaluates the results obtained and defines new qualitative/quantitative objectives relating to the improvement of health and safety performance for the current year. The level of achievement of these objectives is constantly monitored and reported by the Health and Safety function through the monitoring of system indicators, an annual internal audit plan and self-assessment surveys of the system's performance.

The following targets have been set for 2025:

• reduction of at least 35% of the identified occupational health and safety risk factors (calculated on the total risk factors existing on 1 January 2025). The results as at 31 December 2025 show that over 7000 risks have been closed, reaching 41% of the total, confirming that the objective has been achieved.
• completion of 100% of the number of medical consultations scheduled for 2025 (as of 1 January 2025). For 2025, 25,000 visits were scheduled and 27,584 (110%) were carried out, confirming the achievement of the target.

In 2025, Intesa Sanpaolo obtained the renewal of the certification of compliance of its Occupational Health and Safety Management System with the ISO 45001, ISO 45003 standards and the Biosafety Trust Certification protocol; the third-party audit activity was based on a representative sample of branches and sites and involved the main structures of the headquarters, branch employees, occupational doctors, Workers' Safety Representatives and the personnel of maintenance and cleaning companies. The certification obtained concerns all Intesa Sanpaolo branches and properties in Italy. The certification body also confirmed that the organization has fully implemented its risk management protocols in line with current national and industry regulatory requirements.

The renewal of ISO 45003 represents a significant recognition of the commitment to promoting a healthy and sustainable working environment. This certification is the result of a proactive approach to psycho-social risk management, which takes into account the results of the implementation of practices and policies that comply with international standards established to ensure the psychological well-being of employees. Compliance with these standards not only highlights the Group's commitment to adhering to industry best practices, but also underscores its desire to create a work environment that promotes productivity, employee satisfaction, and long-term business sustainability.

In line with the centrality that Intesa Sanpaolo attributes to occupational medicine, both as a primary tool for prevention and, in the future, for health promotion, the Intesa Sanpaolo Group has chosen to continue with the development process already underway, thus renewing the Biosafety Trust Certification, which enhances the set of best practices of reference to minimize the risks of spreading communicable and non-communicable infectious diseases in the workplace aggregation of public and private sectors.  through the adoption of a plan to contain the spread of any pathogenic biological agent.