Strengthening Corporate Governance

As a publicly traded company, we follow the rules of the Brazilian Securities and Exchange Commission (CVM) and B3, in Brazil. Abroad, we comply with the rules of the Securities and Exchange Commission (SEC) and Nyse, in the United States; and Latibex from Bolsa y Mercados Españoles, in Spain.

We follow governance procedures compatible with the rules of the markets in which we operate, in order to guarantee the adoption of international transparency standards. Thus, we seek to reinforce our credibility in the market and improve the relationship with our stakeholders: shareholders, investors, customers, suppliers, employees and society, among others.

Good corporate governance and compliance practices are a pillar of support for our business. Thus, we made commitments in our strategy that translate into ensuring a governance model that allows a balance between efficiency and control; and to act with integrity and transparency, with zero tolerance to fraud and corruption.

We have implemented significant advances in corporate governance and in the company’s integrity, compliance, and internal control systems. In addition, we have adopted rigorous ethics and integrity standards through initiatives that reinforce our purpose, values, and commitment to continuous improvement and alignment with the best market practices.

To this end, we are constantly improving our practices and our main governance instruments, such as our Bylaws; the internal regulations of the Board of Directors, the Executive Board and the advisory committees to these bodies; policies and codes, among others.

Act with integrity

Our Model

Petrobras ‘corporate governance structure consists of the General Shareholders’ Meeting, Fiscal Council, Board of Directors and their committees, Audits, Ombudsman-General, Executive Board and their committees.

Ethics, Transparency and Integrity

All our operations must be based on ethics, transparency and integrity, which are defined in our Code of Ethical Conduct, which fully complies with applicable Brazilian and international rules and laws.

Other important instruments are the Compliance Policy, which describes the integrity commitments assumed by the company while conducting its business, the Ethics Conduct for Suppliers guide, a document exclusively aimed at our suppliers, with instructions on the ethical values and behaviors expected, the Competitive Compliance Guidelines, which contains a summary of guidelines to meet the applicable legislation aimed at the company’s management and employees, and the Corporate Risk Management Policy, which establishes the guidelines for the review of the Company’s main risks at least two times at the year.

Compliance Program

Our Compliance Program is the set of mechanisms aimed at preventing, detecting, and remedying misconduct and harmful acts committed against the company, including those related to fraud and corruption, money laundering, business sanctions, conflict of interest, and violations of antitrust.

The Program was created based on the principles and guidelines established in our Compliance Policy and Code of Ethics and Conduct to encourage and maintain a culture of integrity at the company.

The Program  is aimed at our various stakeholders, including the senior management, employees of Petrobras and its equity interest, customers, suppliers, investors, partners, sponsored entities, government, and those who relate to and/or represent Petrobras’ interests in its business relations.

It has three pillars that aim at continuously strengthening ethics, integrity, and transparency in all of our businesses:

Prevention: aims at identifying, assessing, and mitigating compliance risk, including those related to fraud and corruption, money laundering, business sanctions, conflict of interest, and violations of antitrust

Detection: includes mechanisms capable of timely identifying and interrupting any potential ethical misconduct that may not have been prevented by preventive actions, enabling the accountability of those involved.

Remediation: establishes accountability and the applicable penalty for each proven case of misconduct, as well as enables the improvement of the vulnerabilities that led to the respective misconduct and the recovery of any potential damages.

The program must be read and understood in conjunction with the Code of Ethical Conduct, the Compliance Policy, and other internal standards and procedures. Knowledge and adherence to these documents contribute to everyone’s commitment to strengthening the company’s compliance environment.

Petrobras Governance and Compliance Board is responsible for the company’s Compliance Program and is the guardian of the Integrity System.

Our program follows Brazilian and international laws to fight corruption, such as the Brazilian Anti-Corruption Law (Law 12,846/13), the U.S. Foreign Corrupt Practices Act (FCPA), and the UK Bribery Act.

To learn more about our actions, visit our “Compliance, Ethics, and Transparency” channel (click here)

Initiatives in which we participate 

To promote continuous improvement of our mechanisms and foster good practices of integrity, social and environmental responsibility, and governance in companies and society, we participate in various Collective Actions with different companies and organizations.

Policy Influence – Petrobras contributions and other spending

Privacy and Personal Data Protection

Privacy and Personal Data Protection

In order to comply with the Law 13.709/2018 (General Personal Data Protection Law – LGPD) and to ensure the protection of the personal data of our stakeholders, we promote the constant awareness of our employees, acting with a focus on transparency, complying with the rights of data owners and adopting technical and administrative measures of prevention and security.

Our approach

Main actions

1. Specific section on privacy and data protection in the Code of Ethical Conduct;

2. Mandatory training for employees with concepts and practical cases;

3. Advisory consulting for Petrobras System’s companies;

4. Constant evolution of information security processes and controls, with a focus on personal data;

5. Anti data leak rules with the use of Data Loss Prevention (DLP) tool to detect potential incidents;

6. We have an information security incident response team that acts on potential data protection violation scenarios;

7. Strengthening of initiatives to ensure privacy by design in projects, processes and in the development of technological solutions;

8. Inclusion of the topic in the Integrity Due Diligence process, in priority contracting families, in order to assess the data protection practices of our suppliers; and

9. Automatic tagging system for personal data in contracts that will be disclosed on the Transparency Portal, in addition to a booklet on LGPD and LAI to guide our employees.

For more information on the subject, consult our Privacy and Personal Data Protection Booklet.

Bylaws, Codes and Policies