Health and safety

The policy applies to the Parent Company Intesa Sanpaolo S.p.A. and, by virtue of the policy and coordination action exercised by it, to all Group companies.

From the Policy derives rules and processes applied at Group level which define Intesa Sanpaolo's approach to protect the health, safety and well-being at work of all its people as well as of the other external stakeholders impacted by the Group's activities (eg. customers and suppliers).

The basic principles reflect the requirements of the Consolidated Law on health and safety in the workplace (Legislative Decree 81/2008) and of the relevant mandatory legislation. The Policy is approved by the Employer for health and safety pursuant to Legislative Decree 81/2008.

The responsibilities and methods associated with the implementation, maintenance, monitoring and improvement of the Occupational Health and Safety Management System are outlined in the Process Guide – Compliance Management – Management of Occupational Safety Regulations, approved by the competent corporate functions. The activities described in the above-mentioned document and the procedures put in place make it possible to guarantee over time the ability to comply with current regulations and to pursue the principles and commitments declared in the company Policy on the subject. The Guide was produced with the goal of reducing the possibility of any harmful event occurring that impacts people, the environment and relevant external parties, monitoring risks in the operations of the company and suppliers involved in the company’s activities, and gradually improving the Group’s performance in occupational health and safety. The risks to the health and safety of Group’s people are evaluated according to a multidisciplinary approach, considering the combined effect of the working environment, processes and equipment as well as the subjective conditions of workers. The health and safety risk management process comprises the following phases:

• identification of dangers and their classification;
• risk assessment;
• identification and preparation of prevention and protection measures and procedures;
• definition of an action plan as part of a programme to guarantee the improvement of safety levels over time, with the identification of the competent company structures;
• realisation of the planned measures as part of the programme;
• definition of worker information and training programmes;
• monitoring of the implementation of the programmes and checks on the application and effectiveness of the measures adopted;
• management of residual risks.

The Guide specifically introduces operational health and safety checks for the identification, prevention and management of emergencies, implementing effective methods to prevent or minimise risks. In particular, it defines the procedures for the identification and appointment of emergency workers, the procedures for the performance of the tasks assigned for emergency management, the organisation and conduct of periodic checks and emergency drills. Furthermore, in order to monitor the risks from interference, the Guide specifically defines the obligations to be fulfilled regarding health and safety in the event of organisation of internal events or services, supplies and contracted works to be carried out at the Group’s offices by external suppliers or subcontractors. Among the safeguards envisaged by the Guide, in order to assess injuries, accidents and/or near misses in the workplace, the Occupational Medicine and Psychosocial Risks Office – which guarantees ever greater supervision of the activities related to occupational medicine (health surveillance, accident and occupational disease analysis, health emergency management) and psychosocial risks – submits a weekly summary of the accidents reported to the Prevention and Protection Office, which in turn activates the preliminary investigation. For each of the accidents and/or incidents reported by Supervisors, Emergency Coordinators, workers or Worker Safety Representatives (WSR), a verification activity is carried out by the Prevention and Protection Office. The activity includes the collection of all the factual elements both of a testimonial and documentary nature (e.g. description of activities, equipment used, companies involved, etc.) and, where necessary, the conduct of an inspection to identify the primary cause of the event and define any corrective measures to be taken.

In addition to ensuring compliance with current legislative and regulatory forecasts, the highest standards for health and safety are pursued through the implementation of a health and safety management system (SGSL) that complies with the requirements of the International Health and Safety Assessment Specification (ISO 45001). 
Intesa Sanpaolo has integrated the SGSL by obtaining certifications according to the ISO 45003 Guidelines, relating to the management of psychosocial risks and the promotion of well-being at work, and the Biosafety Trust Certification scheme (developed by RINA Services) for the prevention and control of infections and the protection of people's health from biological agents.

In May 2024 Intesa Sanpaolo retained the Compliance Certification for Occupational health and safety management – Psychological health and safety at work — Guidelines for managing psychosocial risks (ISO 45003), by a third-party certifying body.

The ISO 45003 certification represents a significant recognition of the commitment to promoting a healthy and sustainable working environment. This certification is the result of a proactive approach to managing psycho-social risks, which takes into account the results of the implementation of practices and policies that comply with international standards established to ensure employees’ psychological well-being. Compliance with these standards not only highlights the Group’s dedication to adhering to industry best practices, but also underscores its willingness to create a work environment that fosters productivity, employee satisfaction, and long-term business sustainability. An HSE Management System Review meeting is held annually, in which the Top Management evaluates the results obtained and defines new qualitative/quantitative objectives relating to the improvement of health and safety performance for the current year (For 2024 the following targets were set: 1. Reduction of at least 25% in identified occupational health and safety risk factors (calculated on the total of risk factors existing as of 1 January 2024). The results as at 31 December 2024 show that approximately 7,700 risks were closed reaching 40% of the total, confirming that the target has been achieved. 2. Completion of 100 % of the number of medical visits planned for 2024 (as at 1 January 2024). No. 12,648 visits were planned for 2024 and no. 16,626 (131%) were carried out, confirming the achievement of the target). Through constant monitoring of the system indicators and an annual plan of internal audits, the Workplace Health and Safety, reports annually on the level of achievement of the targets set by Top Management. In 2024 Intesa Sanpaolo retained the compliance certification of its Occupational Health and Safety Management System with the ISO 45001 standard; the third-party audit activities were based on a representative sample of branches and sites and involved the main head-office structures, branch employees, occupational health doctors, Worker Safety Representatives, and maintenance and cleaning company staff. The certification obtained covers all of the Intesa Sanpaolo branches and buildings in Italy. The certification body also confirmed that the organisation has fully implemented its risk management protocols in line with the current national and industry regulatory requirements. In line with the central role attributed by Intesa Sanpaolo to occupational medicine, both as a primary tool for prevention and, prospectively, for health promotion, the Intesa Sanpaolo Group chose to continue with the fine-tuning process already underway thereby retaining the Biosafety Trust Certification, which enhances the set of reference best practices to minimise the risks of spreading communicable and noncommunicable infectious diseases in public and private meeting places, through the adoption of a plan for the containment of the spread of any pathogenic biological agent.