Bank of Ireland Group. Group Code of Conduct 2015

Bank of Ireland Group Group Code of Conduct 2015 Policy Title: Bank of Ireland Group Code of Conduct 2015 Policy Owner: Approved by: Review Frequency: Head of Group Regulatory, Compliance and Operational Risk Group Nomination & Governance Committee Annually Last Approval Date: January 2015

Contents Introduction 2 Compliance Policy Statement 3 Section 1 Persons to whom the Code Applies 4 Section 2 Your Personal Responsibilities under this Code 4 2.1 Act with Integrity and Honesty 4 2.2 Report Wrongdoing 4 2.3 Avoid Disclosing Confidential Group, Employee and Customer Information 5 2.3a 2.4 - Social Networking / Business Networking Avoid Association with Known or Suspected Criminals or other Persons who Present a Threat to the Group 6 2.5 Avoid Conflicts of Interest 6 2.5a - External / Private Interests 7 2.5b - Business Involvement 7 2.5c - Political Activities 8 2.5d - Transactions with Connected Persons 8 2.5e - Lending to parties related to Bank of Ireland Group 8 2.5f - Gifts and Invitations 8 2.5g - Bribery & Corruption 9 2.5h - Risk Based Remuneration Packages 9 2.6 Ensure Prudence in Your Financial Affairs 9 2.7 Follow the Code 10 6 Section 3 Responsibilities that your Role may bring 11 3.1 Legislation / Regulation / Codes of Practice and Group Policy 11 3.1a - Preventing Money Laundering and other Financial Crimes 11 3.1b - Competition Law 11 3.2 Meeting the Competency Standards of your Role 12 3.3 Dealing with Regulators and Key Government Bodies 12 3.4 Conflicts of Business Interests 12 3.5 Fair Employment Practices and Diversity 12 3.6 Reporting Accounting Complaints 12 3.7 Insider Dealing 13 Section 4 Dealing in Bank of Ireland Stock 13 4.1 Persons Discharging Managerial Responsibility (PDMRs) 13 4.2 Employee Insiders 14 4.3 Other Employees 14 1

An Introduction by Richie Boucher, Group Chief Executive The Bank of Ireland Group Code of Conduct (the Code) is the standard that we set ourselves for what we say and do in our relationships with our customers, suppliers, employees, shareholders, Government and regulators. It is our commitment to the behaviours that are expected from each of us. The Code gives us guidance on how these behaviours should apply to all activities of the Group. We are all required to follow both the spirit and the letter of this Code in our dealings with others, both internally and externally, and in our personal financial dealings. The Code is not, nor can it be, specific to each and every situation that we may encounter as an employee or director of a Group business unit. However, the intention of the Code is very clear and includes details of what action you can take if you have any concerns. Each employee has a personal responsibility to read the Code and understand what it means. If you are in doubt about any part of the Code please consult with your manager. If you suspect that a breach of this Code or of any Group policy has occurred, you are obliged to report this to your manager or you can raise your concern as described in the Group s Speak Up policy. I would ask each of you to personally review and refamiliarise yourself with its contents. Thank you, Richie Boucher Group Chief Executive January 2015 2

Compliance Policy Statement This policy applies to all employees and directors of the Bank of Ireland Group. Bank of Ireland Group provides a wide range of financial services to customers in various markets and jurisdictions. In all markets in which we do business, we are committed to operating with integrity and accountability, specifically we are committed to: Complying with the legal, regulatory and other requirements of the jurisdiction concerned Acting honestly, fairly and reasonably in all dealings with customers, suppliers, employees, shareholders, Governments and regulators. It is Bank of Ireland Group policy that bribery and corruption are unacceptable and that staff along with business and commercial partners are expected to act at all times with integrity and honesty. The Group will not consider any business activities that involve bribery or corruption to be binding. By complying with the letter and the spirit of the law and regulations, we aim to: Preserve the reputation and integrity of the Group and engender trust in the Group Meet the requirements of all regulatory bodies Avoid adverse publicity associated with non-compliance Avoid the cost of having to put things right Protect the business of the Group and its staff. All staff have a role to play in achieving these objectives as follows: 1) As an employee of the Group, you are personally accountable for ensuring that you are compliant with both the letter and the spirit of this policy. 2) You must act with integrity in all dealings with customers and other parties with whom the Group is connected, and in all internal matters. 3) Where you have doubts or concerns about any matter relating to our compliance with legal or regulatory obligations, you have a duty to: discuss the matter fully with your Manager or, discuss it directly with Senior Line Management or, raise the matter through the GRCOR Risk Advice Centre or, bring it to the Group s attention independently of management, via the Group s Speak Up policy. 4) You will not be criticised by management, nor will you suffer as a consequence of bringing a breach or suspected breach of our legal or regulatory obligations to the attention of the Group through appropriate channels. 5) Employees who knowingly witness explicit non-compliance with legal or regulatory obligations, and who then fail in their duty to report the activity, are placing themselves at risk of an allegation of involvement in the non-compliant activity, and consequently are exposed to the associated sanctions. In certain circumstances, failure to report these activities may lead to criminal prosecution. A good reputation is hard won and easily lost. Every employee has a role to play in protecting our reputation; this is a duty, not an option. 3

1. Persons to whom the Code Applies This Code applies to all employees of Bank of Ireland Group. By way of definition, employee means any person employed by any member of the Group on foot of a contract of employment, whether full-time or part-time, permanent or temporary, fixed-purpose or fixed-term. This policy also applies to all directors of the Group and any of its subsidiaries. Elements of the Code continue to apply after an employee has left the Group (see sections 2.3 and 3.7). 2. Your Personal Responsibilities under this Code 2.1 Act with Integrity and Honesty You are expected to act with integrity and honesty in your dealings with customers, regulatory authorities and other parties with whom the Group is connected and in all internal matters. This is an overriding principle that should govern all your actions and decisions. The reputation of the Group depends on the conduct of individual employees and on individual employees acting together as a group. In performing your duties, you are accountable for your conduct to colleagues, line management, customers and shareholders. If you are in doubt about any of your proposed actions or decisions, consult your manager, or senior line management. If you become aware of any fraud or irregularity by an employee, by a group of employees, by a customer or by any activity likely to damage the reputation of the Group or have the Group s integrity brought into question, you must promptly report it to your manager, senior line management, GRCOR Risk Advice Centre, or via the Group s Speak Up Policy. 2.2 Report Wrongdoing If you witness or suspect wrongdoing you are obliged to report it. This relates to a breach of any Group policy or code or a breach of the Criminal Justice Act 2011 or other relevant legislation by an employee, by the Group, by a customer or by another party with whom the Group is connected. Under The Criminal Justice Act 2011, you may be committing an offence if you fail, without reasonable excuse, to disclose information as soon as practicable which you know may be of material assistance to prevent a crime or secure a prosecution. This Act applies to offences under seven main heading as follows: Offences relating to banking, investment of funds and other financial activities; Company law offences; Money laundering and terrorist activities; Theft and fraud offences; Bribery and corruption offences; Consumer protections offences and criminal damage to property offences. The onus is on each individual to report incidents, concerns or mere suspicions. If you wish to raise a concern, you should do so in accordance with the procedures set out in the Group s Speak Up Policy. You will not suffer because you have raised a concern in good faith to the Group or to an appropriate authority. A report made in good faith means a report of conduct defined as wrongdoing, where the person making the report has reasonable cause to believe the concern is true and where the report is made without malice. Wrongdoing means a breach or suspected breach of these standards, or a concern in respect of potential improprieties including but not limited to matters of financial reporting, financial control, accounting and auditing or other matters. The Criminal Justice Act 2011 provides protection for employees from penalisation for disclosing information relating to relevant offences. 4

All employees are accountable for their actions and, as such, the Group regards genuine whistleblowers as witnesses of wrongdoing, not as complainants. We hold each other accountable, so an individual making a properly motivated report in good faith is acting to defend the Group s reputation and integrity, and is supporting the word and spirit of this Code of Conduct. However, such a report must not be treated as an alternative or substitute remedy for staff disputes properly considered in the context of grievance procedures. If you wish to raise a concern, you should do so in accordance with the procedures set out in the Group s Speak Up policy. All reports made in good faith and resulting investigations will be kept confidential, unless disclosure is required under any enactment, regulatory requirement or an order of a Court. Separate specific legislative/regulatory frameworks (for example, the UK Public Interest Disclosure Act, 1998; the Criminal Justice Act 2011) will be directly applicable to certain business units and this Code does not replace such provisions. 2.3 Avoid Disclosing Confidential Group, Employee and Customer Information You should treat all information obtained through employment with the Group as confidential unless there is unambiguous evidence or indication to the contrary (for example, a direction from management or a customer). You must only use confidential information for the proper performance of your duties. Confidential information should only be discussed within the Group on a need to know basis, and should never be discussed outside the Group. You may not, without authorisation, release information in respect of any aspect of the Group s activities to any third party, including news media. If asked to comment on any aspect of Group business by an external party, whether it is a casual or a targeted question, you must refer the person to Group Communications. If contacted by a regulatory authority, you must not respond directly unless you are authorised to do so in accordance with the Group's Policy for Communicating with Regulators and Key Government Bodies. If you receive a request for information from a regulatory authority, please forward the request to the appropriate Regulatory Relations Team outlined in the Policy. You have a duty to ensure the confidentiality of Group and customer and employee information by complying with relevant legislation and internal information security policies. In addition, you must comply with data protection and privacy regulations that protect the privacy and integrity of individuals personal data. When you handle personal data, you are in a position of trust. It is important to ensure that personal data is only used for the purpose for which it was collected. Unauthorised disclosure of personal data could lead to the Group, a business unit or an individual being prosecuted. Personal data must only be used to assist you in the legitimate performance of your duties; it must never be disclosed to third parties who have no right of access to it. It should be noted that you, and/or others, may be disciplined if you breach the Group s Data Protection and Privacy policy and associated standards. Please bear in mind that you have signed a confidentiality agreement with the Group as part of your employment contract and this agreement extends outside the work environment as well as inside. Intellectual Property includes the patents, trademarks, design rights, copyrights and other creations owned by the Group. You must ensure that you protect and maintain the confidentiality of the intellectual property of the Group and of third parties who act on behalf of the Group. 5

2.3.a Social Networking / Business Networking The Group has a designated Social Media Team, which is responsible for participating, on behalf of the Group, in social networking sites such as Facebook, Twitter etc. All other employees are prohibited from posting on these sites while at work or from your Bank PC, laptop, phone or other device. You are also prohibited from posting comments about your employment or experiences at work, either positive or negative, at any time, while at work or otherwise. You may choose to share content published within the Bank's social media channels by the Group Social Media Team, throughout your personal social network, for the purpose of providing information relating to Bank of Ireland marketing activity. However, in doing so, you may not comment or provide any form of advice to customers, or potential customers, and you may not respond to specific queries in relation to this content. In the course of your work you may, if required, request access to these networking sites, via the appropriate authorisation channels. Business networking sites e.g. LinkedIn, help the development of appropriate business partnerships and the expansion of business connections. It is acceptable to access business networking sites for business purposes while at work. You must not enter into any chat room discussions on these sites from your Bank PC, laptop or other device. It is also not acceptable at any time to disclose Group confidential information or information of a commercially sensitive nature. Information that would carry a Purple, Red or Amber classification internally must not be disclosed on these sites or to your contacts, while at work or otherwise 2.4 Avoid Association with Known or Suspected Criminals or other Persons who Present a Threat to the Group You will be aware, from your employment with the Bank and from media coverage, of external threats faced by the Group. You should not associate with known or suspected criminals or persons who may present a threat to the Group, to you or to your colleagues. If you become aware of any threat to the Group, to you or to your colleagues, you must notify your manager immediately. If you do not notify your manager, you may be subject to disciplinary action up to and including dismissal and/or criminal prosecution. 2.5 Avoid Conflicts of Interest You must avoid situations where personal interests conflict, or appear to conflict, with the interests of the Group or its customers. You must take appropriate measures to recognise and manage situations where a conflict of interest does arise. For the purpose of this Code, a conflict of interest occurs when an employee s private or personal interests interfere, or may appear from the perspective of a reasonable person to interfere, with the interests of the Group or its customers. A conflict situation may arise when an employee takes actions or has interests that may make it difficult to perform his or her duties objectively and effectively. Conflicts of interest may also arise when an employee, or a member of his or her family, receives personal benefits as a result of his or her position in the Group. You cannot engage in the selling or promotion of any product or service where there is any conflict with the Group, or where there could be a perception of a conflict with the Group. Information received in the course of our business dealings should not be used for personal gain or any purpose except that for which it is given. It is vital that customers and potential customers have confidence in the Group. You must avoid actual or apparent conflicts of interest, some possible examples of which follow below. 6

Employees must have prior written approval from a Group Executive Committee (GEC) member or a direct report of a GEC member before accepting any external positions or outside interests, or any gift or invitation that could be perceived to be a conflict of interest (see paragraphs 2.5a, 2.5b and 2.5f). The approval should establish the parameters regarding what is and is not permitted and the processes for addressing potential conflicts if required. The request for approval should be routed through your manager. The list of GEC members and their direct reports is available on Insite. A conflict of interest approval form is available on Insite, or from GRCOR Risk Advice Centre. This approval is subject to renewal, at a minimum every three years. If it is not renewed it will be deemed to have lapsed. It is the employee s responsibility to re-apply for approval. In summary, if you are involved in an outside business as a director, you are required to secure the prior written approval of a GEC member or a direct report of a GEC member. If you are involved in an outside business as an investor or other participant, where this involvement may give rise to a conflict of interest, you are required to secure the prior written approval of a GEC member or a direct report of a GEC member. Without this approval, your participation is not permitted and you will be subject to disciplinary action. A conflict of interest can sometimes occur within the Group. If you are subject to an internal conflict of interest, please see Section 3.4 below. 2.5.a External / Private Interests As a Group employee, you are encouraged to participate actively in the communities in which you live and work. The Group is supportive of employees who undertake work for, or accept positions in, organisations in their communities that are generally perceived to be of benefit to the community. However, in normal circumstances you should not hold a position or have an outside interest that materially interferes with the time or attention that should be devoted to your duties in the Group. Where such an interest or position requires a non-trivial time commitment during normal business hours, or could lead to any damage to the Group s reputation, the prior written approval must note this. 2.5.b Business Involvement The primary business duty of employees is to the Group and any external business activities that conflict with this duty must be avoided. If you are considering becoming involved in any capacity in a business outside the Group, including as an investor, in instances where your involvement may give rise to a conflict of interest you must have prior written approval as described above. If the involvement you are considering may require or lead to your holding a non-executive directorship, then you must secure prior written approval from a GEC member, or a direct report of a GEC member, as outlined in Section 2.5 above. If your involvement is approved, you are required to be alert at all times to any potential conflict of interest that may arise while holding such role. Where a conflict arises, or seems likely to arise, you are obliged to discuss the situation with your manager so that any potential negative impact for the Group can be managed. Where such circumstances arise, you should consider taking advice on your personal position from the Group Secretary or the Group Legal Adviser. You must ensure that the business outside the Group with which you are involved understands that you are acting in a personal capacity and that you do not represent the Bank of Ireland Group in any respect. Any financial transactions relating to approved business interests should be negotiated through separately designated and properly established accounts. Accounts designated as staff accounts must not be used for such purposes. 7

You should be particularly careful to observe the provisions of this Code when considering entering into a business relationship with a Group customer: in particular, your involvement in such an activity remains subject to this Code even if a third party - such as a spouse - maintains the formal link to the venture. 2.5.c Political Activities If you are a member of a political party or a political movement, you must ensure that your involvement is not prejudicial to the interests of the Group. It is acceptable for you to participate in political parties. This includes membership of any party and accepting nomination to stand in either national or local government elections. Applications for career breaks for this purpose will be considered in accordance with the Group s guidelines on flexible working. Where canvassing arises, either on your own behalf or on behalf of other members of a political party, you have a special responsibility to ensure that any involvement in such canvassing is not perceived as associating the Group with any particular political party. It is also important that no customer relationship with the Group is in any way affected, influenced or used. 2.5.d Transactions with Connected Persons You are prohibited from approving transactions with Connected Persons or providing out of course or exceptional treatment to Connected Persons (for example, lending on favoured terms, covering trading losses, and waiving commissions, charges or fees). For the purpose of this Code, the term Connected Persons includes your spouse or family members, or any significant other non-family relationship, or any entity controlled by you or another Connected Person, or any entity with which you are associated. You are prohibited from amending or processing unauthorised transactions on a Connected Person's account 2.5.e Lending to parties related to Bank of Ireland Group You must comply with the Central Bank of Ireland Code of Practice on Lending to Related Parties and are prohibited from approving transactions without the requisite internal and regulatory approvals having been received. For the purpose of this Code, parties related to the Bank of Ireland Group include a Director, Senior Manager or significant shareholder of the Bank of Ireland Group or any of its regulated subsidiaries and any persons connected to the related party as per 2.5d Senior Managers are management who report directly to the Court/Board of Directors or Chief Executive/Managing Director of the Bank of Ireland Group or any of its regulated subsidiaries. Any lending to related parties must be referred to the Group Secretary s Office. A significant shareholding is 10% or more of the shares or voting rights. A list of Regulated Subsidiaries is available on request from Group Regulatory Compliance and Operational Risk. 2.5.f Gifts and Invitations You may not offer, give, solicit or accept gifts, sponsorships, invitations or other benefits if they could be deemed to influence or compromise your position or any business decision of the Group. Giving or accepting gifts, sponsorships, invitations, money, hospitality or any other benefit may create an appearance of impropriety or may raise a potential conflict of interest. You may not offer, give, solicit or accept any gifts that might influence the decisions that you, or others make in business transactions involving the Group, or that others might reasonably believe would influence those decisions, or could compromise your integrity or ability to exercise independent judgement. Modest gifts and favours, which would not be regarded by others as improper, may be offered, given or accepted on an occasional basis. You are prohibited from requesting gifts, sponsorships, 8

invitations and other benefits in exchange for the provision of advice, products or services. You should notify your manager about all offers or receipt of gifts, sponsorships, invitations and other benefits, which could be seen to compromise your integrity, regardless of whether or not the offer is accepted. As it is not practical to place a Group-wide monetary value on what is acceptable, each Division will issue local guidance on (a) the offer or receipt of gifts, sponsorships, invitations and other benefits which may not be given or accepted without prior approval and (b) those offers you must notify your manager about, regardless of whether the offer is accepted. All approved gifts must be recorded on the business unit or divisional gift register. If you have questions regarding the appropriateness of a gift, invitation or other benefit, you can discuss this with your manager or GRCOR Risk Advice Centre As a general rule, meals, refreshments, entertainment, accommodation or travel of reasonable value, should only be accepted on the basis that the expense would be deemed an appropriate business expense if it were to be charged to the Group. No sponsorship should be sought or accepted by a staff member in his/her capacity as a Group employee or as a member of a Group Club or Society where it could be seen to influence or compromise business decisions. 2.5.g Bribery and Corruption It is Group Policy that bribery and corruption are unacceptable and that staff dealing with business and commercial partners are expected to act with integrity and honesty at all times. The Group will not consider any business activities that involve bribery or corruption to be binding. Unless permitted by Section 2.5f of this Code, the handing over, promise or offer of any type of payment, commission, gift or remuneration to any individual or employee, officer or director of other companies or institutions is prohibited, whether made to them directly or indirectly through persons or companies related to them. Staff members may not receive or provide cash, cheques, gift certificates (whether or not convertible to cash) unless permitted under Section 2.5f of this Code. 2.5.h Risk Based Remuneration Packages The Group s remuneration policies and practices are structured to promote sound and effective risk management and to reduce the incentive for excessive risk taking. It is important that you would not do anything to diminish the effectiveness of these policies. If risk alignment elements are incorporated in your remuneration package, you are prohibited from entering into hedging strategies, such as short selling of stock options, or any arrangements which may undermine these risk alignment effects. If you have any doubt as to how this impacts you, please contact Group Performance and Reward 2.6 Ensure Prudence in Your Financial Affairs You should conduct your own financial affairs in a prudent manner and should avoid financial situations that could reflect unfavourably on the Group or on yourself. Employees are free to assume appropriate financial commitments and obligations. As customers of the Group, normal consumer protections which are afforded to you under regulatory codes of conduct apply to you. However, as an employee of a financial institution you are expected to conduct your affairs to a high standard and you should be aware of the dangers inherent in overextending yourself financially and exercise particular care to keep your financial affairs, including your tax affairs, in good order. You should never engage in any transaction that is inappropriate to 9

your position in the Group. The Group may conduct credit checks on new employees. Any employee who finds him or herself in a difficult financial situation should seek advice from their manager, senior line manager, HR Business Partner or from Staff Direct - for example, if you are more than 90 days past due on your loan repayments and you have not agreed a repayment plan with your lenders. The Group recognises that difficulties can arise from within and outside the workplace and provides a confidential Employee Assistance Programme (EAP) to support individuals in dealing with difficult situations and problems they may encounter. The EAP service can assist individuals experiencing a wide range of difficulties including financial problems. The EAP service is independent and confidential and is provided to each employee without prejudice to security of employment, individual reputation or career prospects. It is run by external professionals who provide information, support and/or counselling; further details are available on Insite. The Group acknowledges that some employees may find it hard to initiate contact with the Group on the question of financial difficulties. Therefore, the Group may initiate contact with you, in a confidential and discrete manner, if there are indications that you are experiencing financial difficulties (whether these arise from your financial commitments to the Group or elsewhere). The Group may contact you in such circumstances to find out what is giving rise to the difficulties, in order to address with you how they can be resolved. In these cases, you are expected to be attentive to what the person who has contacted you has to say and to ensure that they have an opportunity to express their concerns. You are expected to be open and responsive and to afford the Group a high level of co-operation where action is needed to resolve financial difficulties you may find yourself in. 2.7 Follow the Code You are responsible for knowing the contents of this Code of Conduct and adhering to the standards as detailed herein. Where you are responsible for managing other employees, you should ensure that they make themselves aware of the provisions of this Code. Where this Code refers to the need for you to obtain 'approval' for any action, you must apply in writing, or by email, for such approval, and ensure that the approval is confirmed in writing or by email, and you should retain these records. The Group may assess your awareness and knowledge, as well as compliance with this Code. You may also be asked to make a declaration of your awareness and understanding of the Code and its implications for your duties. If a situation arises where you find yourself inadvertently in breach of this Code, you should, without delay, consult your manager, senior line management, GRCOR Risk Advice Centre or the Group Secretary who will deal with the matter in a sympathetic manner and assist you in ensuring that the breach is remedied effectively. However, a wilful breach of any provision in this Code or failure to disclose a known inadvertent breach will be regarded seriously and may lead to disciplinary action, which may include dismissal. For your protection, and for the protection of the Group and its customers, the Group may record all outbound or external incoming telephone calls. 10

3. Responsibilities that your Role may bring 3.1 Legislation / Regulation / Codes of Practice and Group Policy All business decisions and actions taken must comply with the law, any applicable regulatory directives, all relevant codes of practice (including voluntary codes to which the Group subscribes) and all Group policies. As indicated in the compliance policy statement, the Group is resolute in its commitment to comply in full with the legal, regulatory and other requirements of the various jurisdictions in which the Group operates and will provide guidelines covering such requirements which must be followed by employees at all times. The Group does not approve of any actions outside these rules, even if you believe that such actions are performed for the benefit of the Group. Where your position requires you to make judgments on behalf of the Group, the Group requires you to comply in full and make your decisions with complete integrity, honesty and transparency, and to be accountable for your decisions. It should be noted that you, and/or others, may be disciplined internally or prosecuted externally for any failure to comply with legislation or regulation dealing with taxation, money laundering, company law, market abuse, data protection, consumer protection, competition law, equality and health and safety legislation or other relevant regulations or codes of practice. You must adhere to any specific guidelines published by the Group on these subjects. Falsification or concealment of records, interference in auditing processes or illegal destruction of documentation is all prohibited under this policy. Once again, if you are in any doubt as to how any of these subjects affect you, you should raise the matter with your manager or senior line management. 3.1.a Preventing Money Laundering and other Financial Crimes Bank of Ireland Group is committed to proactively managing the risks associated with financial crime and will continually review and improve security arrangements so that customers may conduct their business safely and securely. This includes ensuring that appropriate procedures and controls are in place to deter and detect financial crime. All employees have a duty not to commit, or assist others in committing, a financial crime. All employees must also take reasonable measures to prevent a financial crime from occurring and/or to take action to prevent a crime from continuing. The Group Anti Money Laundering (AML) and Counter Terrorist Financing (CTF) Policy and the Group Financial Crime Policy are available on Insite, it is important that you read these policies and be familiar with the requirements set out within. It is important for you to be aware that these policies and internal procedures must be adopted as second nature in your day to day activities. This is because AML and CTF legislation places a personal responsibility on you to prevent money laundering and terrorist financing. Failure to comply with the requirements set out in these policies may lead to monetary fines and/or imprisonment. If you have any suspicions you are required to report these to your Money Laundering Reporting Officer. 3.1.b Competition Law Employees involved in activities that could give rise to Competition Law risk have a duty to comply with Competition Law. You must familiarise yourself with the Group Competition Law Compliance Manual and participate in the E-briefing available on Insite. In addition, the web based training course on Competition Law (available on Learningzone) must be completed by those of you for whom the web based training has been deemed mandatory. Your manager will have informed you if you are involved in competition law risk as you will be nominated for specialist training. 11

3.2 Meeting the Competency Standards of your Role You are required to hold and maintain a level of fitness and probity appropriate to your role. For Preapproved Controlled Function (PCF) and Controlled Function (CF) role holders, this includes discharging the ongoing obligations notified to you by Group HR and formally certifying your compliance with the Fitness and Probity Standards on an annual basis. If the Minimum Competency Code applies to your role, you are required to comply with this Code by holding the appropriate qualifications and fulfilling continuing professional development requirements. You may only provide advice to consumers if you are qualified and authorised to do so. If, for any reason, you have any concerns as to how these standards apply to you, or concerns as to your continued compliance with the Fitness and Probity Standards and/or Minimum Competency Code, you should raise the matter immediately with Group HR. 3.3 Dealing with Regulators and Key Government Bodies The Group is committed to establishing and maintaining a relationship of trust and confidence with the regulators and government authorities in all jurisdictions in which we operate. All correspondence with these bodies must reflect the formal and authorised position of the Group and for that reason, only authorised employees are permitted to communicate directly with these bodies. Please refer to the Policy for Communicating with Regulators and Key Government Bodies (available on Insite), or GRCOR Risk Advice Centre, for further information. 3.4 Conflicts of Business Interests The Group is committed to ensuring that we provide a fair, professional and honest service to our customers. There are times however when the Group may have interests which conflict with our customers interests, or occasions whereby the interests of one customer conflict with another. If you encounter this situation in your work, please refer to local policy, your line manager or GRCOR Risk Advice Centre, for guidance on how to proceed. 3.5 Fair Employment Practices and Diversity The Group is committed to creating an environment which promotes equality and dignity at work and which treats all employees, customers and business contacts equally, regardless of the individual s status. You are asked to promote an inclusive work environment at all times, which is considerate of our various similarities and differences and to ensure that all people are treated fairly, with dignity and respect. 3.6 Reporting Accounting Complaints The Group Secretary is responsible for ensuring that the Group s procedures for the receipt, retention and treatment of accounting complaints are established and executed, in line with our obligations under legislation. Should you receive a complaint regarding the Group s accounting, financial control or audit processes (including a complaint from a third party such as a shareholder or customer), you should direct the complainant immediately to the Group Secretary. Any complaint in respect of the Group Secretary should be directed to the Group Legal Adviser. 12

3.7 Insider Dealing You may not deal in the shares of any company at any time when you are in possession of inside information about that company. This applies to all dealings such as buying/selling shares or equity options and spread betting whether on your own behalf, on behalf of others or on behalf of the Group. You are prohibited by law and by this Code from unauthorised passing on of inside information to any other employee or third party, unless in the normal course of employment. This continues to apply following cessation of employment for whatever reason. Inside information means information of a precise nature, which has not been made public, and which, if it were made public would be likely to have a significant effect on the price of the relevant financial instrument. Under market abuse legislation, it is a criminal offence for a person who possesses inside information to use it to acquire or dispose of financial instruments to which that information relates whether for the person s own account or for the account of a third party, directly or indirectly. For example, even the fact that the Group had declined to grant or renew a credit could fall into this category. This applies to all companies securities affected by the information, whether directly or indirectly. It is also a criminal offence to communicate inside information to anyone who is not authorised to have it, or to act on such information, if it is given to you. For this reason, if you receive an investment tip, you should not act on it, or pass it on, if you think it may be based on inside information. Any person who has legitimate access to inside information must be designated as an Insider and recorded as such, on the Group s Insider List. If you believe that you, or an external provider with whom you are dealing, may be in possession of inside information and are unsure as to whether you are, or should be, on the Insider List, please discuss this with your manager, senior line manager, GRCOR Risk Advice Centre or the Group Secretary s Office. Employees working in sensitive areas of the Group may be required to seek approval in advance of any dealing in the shares or securities of any listed company, or any derivatives (See Section 4 below). 4. Dealing in Bank of Ireland Stock In this section, dealing means buying or selling of Bank stock (including Bristol and West securities), or exercising options (including SAYE options), as principal or agent. For the purposes of this Code, equity spread betting is also considered as dealing. If you wish to deal in Bank stock, your obligations in relation to dealing fall into one of three categories below. 4.1 Persons Discharging Managerial Responsibility (PDMRs) PDMRs for the Group are the Directors of the Court, members of the Group Executive Committee (GEC) and the Group Secretary. PDMRs have strict legal obligations with regard to share dealing, including but not limited to mandatory disclosure to Stock Exchanges and restrictions on dealing by connected persons, which include family members. PDMRs should refer to the detailed documentation they have received from the Group Secretary s Office in relation to their regulatory obligations (and those of their connected persons) including procedures for requesting clearance to deal. 13

4.2 Employee Insiders Employee Insiders are employees who are on a Group Insider List. Employee Insiders will normally have been advised of their responsibilities as an Employee Insider and will be aware that their name is on the Group s Insider List. However, if you are in any doubt, you should consult the Group Secretary s Office and, in the meantime, assume that the restrictions applying to Employee Insiders apply also to you. Employee Insiders must have prior written permission, obtained from the Group Secretary's Office, before dealing in Bank of Ireland stock. Permission cannot be granted during close periods or when inside information relating to the Group exists. Employees should not deal in Bank stock on the basis of considerations of a short-term nature. (An investment with a maturity of one year or less will always be considered to be of a short-term nature.) An Employee Insider who has been granted permission to deal must do so within two business days of receiving clearance. 4.3 Other Employees All other employees, who are not PDMRs or Employee Insiders, may deal in Bank stock at any time without seeking prior approval, provided that they are not in possession of inside information. However, stock options (including SAYE stock options) may not be exercised during close periods. These conditions for dealing apply to all transactions, including "bed-and-breakfast" deals, and continue to apply for six months after termination of employment for any reason. (A bed & breakfast transaction is one whereby an investor sells particular shares one day and subsequently purchases an equal number with a view to efficient tax planning). In general, when buying or selling Bank stock, you are free to deal with a stockbroker of your choice. However, you must ensure that: The broker is aware that you are an employee of the Group; Special credit, or any form of facility that is not generally available to clients of the broker, is not obtained without the consent of the Group Secretary. If you act as a trustee of a trust (e.g. a family discretionary trust) you must not disclose any confidential information about the Group. If you are not a PDMR or Employee Insider you may take part in any decision of the trustees to deal in Bank stock provided you are not in possession of inside information. If you are a PDMR or Employee Insider, and you wish to take part in a trust's decision to deal in Bank stock, you will be subject to the procedures outlined above. Please consult your manager, senior line management, GRCOR Risk Advice Centre or the Group Secretary if you have queries in respect of any aspect of this Code. Always remember, if in doubt - Ask! To seek advice about raising a concern, or to make a report, please refer to the Group s Speak Up policy or contact: Maureen Stanley Head of Group Regulatory Compliance and Operational Risk Email: maureen.stanley@boi.com Phone: +353 (0) 7662 44143 In addition, you can contact Public Concern at Work for free advice: From the Republic of Ireland on: 1800 246137 (free phone); From the UK on: 0800 008 6430 (free phone); From other countries on: 00 44 207 404 6609; or by email at: advice28@pcaw.co.uk. All contact with Public Concern at Work is confidential. 14