C.M. Environmental Management System

Code 8.0 Management Systems Preamble

Participants shall adopt or establish a management system with a scope that is related to the content of this Code. The management system shall be designed to ensure: (a) compliance with applicable laws, regulations and customer requirements related to the participant's operations and products; (b) conformance with this Code; and (c) identification and mitigation of operational risks related to this Code. It shall also facilitate continual improvement.

C.M.1 Risk Assessment – Environmental

Elements to Demonstrate Compliance to RBA Code

C.M.1.1 An adequate and effective environmental compliance process is established to monitor, identify, understand, and ensure compliance with applicable laws, regulations, and customer requirements.

1. Policy, Practices, Controls:

Establish a quarterly process to update and maintain a current understanding of and compliance to all applicable legal and customer requirements. The process should include:

• a. Identification of requirements which apply to the facility; be sure to look for emerging and new requirements. This can be done via a legal department with an understanding of the RBA Code, subscriptions to 3rd party reports on regulations, sales & marketing who agree to customer terms, etc.
• b. A means to track these requirements, staying current as:
  • i. The requirements may change (including the RBA Code of Conduct).
  • ii. Your operations may change and bring the facility in scope of requirements or create a gap.
• c. Assess facility operations against these requirements to identify gaps.
• d. Develop updated policy, procedure, training, communication, recording and reporting to close the gaps.
• e. Implement the changes and test them for compliance.

NOTE: Ensure the facility adds any new and changed permitting, licensing, testing, reporting and disclosure requirements to the compliance register noting sufficient time to renew or published before they expire or are due.

2. Records are maintained including:

• a. A compliance calendar with owner, reminders, calendar appointments via e-mail.
• b. Summaries of applicable laws and regulations and requirements and how they apply to facility operations.
• c. Review of the key customer requirements that apply to or impact facility operations.
• d. Analysis of recent RBA code of conduct changes.
• e. Minutes from meetings or other that demonstrate process is conducted quarterly.

C.M.1.2 An adequate and effective due diligence process is established to identify and assess the most significant actual and potential environmental risks where the facility caused or contributed to adverse impacts (including applicable requirements).

1. Policy, Practices, Controls:

• a. A due diligence process focused on the environment. It should be designed to identify and assess the most significant actual and potential environmental risks where the facility could cause or contribute to adverse environmental impacts of internal and external rights holders.
• b. It must include specific risks of relevant demographics, such as gender and age, where the facility may experience, cause, or contribute to adverse environmental impacts for internal and external stakeholders (including compliance with applicable requirements)
• c. The scope of risks and impact should include at a minimum:
  • i. Greenhouse Gas impact
  • ii. Ozone depleting substances (ODS) impact
  • iii. Exposure to and release of multiple chemicals
• d. Ensure the location and stakeholder scope is broad including:
  • i. Every site task, operation and process producing products and services provided
  • ii. Every environmental medium
  • iii. All identified internal and external rightsholders, including at a minimum:
    1. Direct and indirect workers
    2. Young workers, Learners
    3. Foreign and internal migrant workers
    4. Worker representatives
    5. Staff functions
    6. On-site service providers, Suppliers
    7. Customers
    8. Stakeholders in the community next to or near the facility may be impacted.
• e. Risks are addressed through the Hierarchy of Controls in this order:
  • i. Elimination
  • ii. Substitution
  • iii. Engineering controls
  • iv. Process and Administrative controls
• f. The risk assessment is updated when there is a Significant Change

2. Records are maintained including:

• a. Stakeholder identification reports.
• b. Risk assessment reports.
• c. Mitigation plans.

C.M.2 Control Processes – Environmental

Elements to Demonstrate Compliance to RBA Code

C.M.2.1 Environmental responsibilities and authorities are adequately and effectively defined and assigned for all employee levels (senior managers to workers) for the implementation of management systems, and for compliance with laws, regulations, and codes.

1. Policy, Practices, Controls:

1. Have a senior representative assigned responsibility for implementing social responsibility programs in the facility and supply chain. Their scope should include:

   • a. Understanding and assessing facility's compliance with laws and regulations, customer requirements and the RBA Code of Conduct.
   • b. Developing and implementing (likely with other subject matter experts) necessary changes to policies, programs, processes, training, reporting and disclosure as needed to be in legal and customer compliance and RBA Code of Conduct conformance.

2. Responsibilities and authority of each organizational level are recorded in position plans, job descriptions and/or the facility's management system documentation:

   • a. For normal situations.
   • b. For emergency situations which would include where serious adverse impact has been identified.

3. There should be a specific individual or individuals within the facility organization who is responsible for all aspects of:

   • a. Hazardous materials
   • b. Waste
   • c. Air emission treatment
   • d. Environmental noise
   • e. Wastewater
   • f. Energy and GHG
   • g. ODS and elimination if applicable.
   • h. Natural resources use and reduction.

C.M.2.2 Adequate and effective environmental policies and control processes are established.

1. Policy, Practices, Controls:

1. Policies: Aligned with law, the RBA Code of Conduct and facility policy statements are in place and include:

   • a. Reduction (and elimination):
   • b. ODS
   • c. Energy and GHG
   • d. Use of natural resources
   • e. Raw materials and resulting waste.

2. An adequate and effective waste management process is in place for:

   • a. Reception
   • b. Storage
   • c. Dispensing
   • d. Any re-Use, disposal

3. Effective Control processes:

   • a. Each of the policy requirements has an effective implementation control process.
   • b. Mitigating processes are in place for all significant actual and potential risks identified, tracking implementation, and resulting adverse impact reduction identified in the risk assessment.
   • c. Workers can remove themselves from imminent harm and return once the situation is mitigated without fear of retaliation.
   • d. A preventive maintenance process for all treatment equipment for each environmental medium.
   • e. Investigation of each environmental incident (e.g., spill, etc.) resulting in a preventive and corrective action plan.
   • f. Adequate and effective emergency response process with clearly defined steps and roles/responsibilities
   • g. Selection processes for all new chemicals include thoroughly evaluating less hazardous or non-hazardous alternatives, including Greenhouse Gas and ozone depletion impact.

2. Records are maintained including:

• a. Current and past policies and procedures, specifications.
• b. Results and reports from review and control steps.
• c. Corrective action plans, plans for improvement.

C.M.2.3 An adequate and effective training process is established for all managers/workers on all policy/process/job-related aspects and performance targets.

1. Policy, Practices, Controls:

1. Process: An adequate and effective training program for workers/managers:
   • a. New employee orientation plan
   • b. Training needs analysis
   • c. Training plan with frequency
   • d. Training material
   • e. Training records with effectiveness evaluation or verification

NOTE: Ensure these minimum training topics are included: risk, policy, process, controls, responsibilities, grievance are covered.

2. Minimum Training Topics should include:

   • a. Reduction programs
   • b. Hazardous waste handling, storage, and disposal
   • c. Solid waste handling, storage, and disposal
   • d. Air emissions and air emission control systems
   • e. Material restriction
   • f. Water use, discharge, and internal water channel contamination protection
   • g. Storage and disposal
   • h. GHG/ Energy use, reduction, and maintaining energy and fuel-consuming operations

3. Occupational health and safety training shall include content on specific risks to relevant demographics, such as gender and age, if applicable.

   • a. Workers responsible for storage, clean up, or disposal of chemical releases and waste must receive specialized training (and certification where required).

2. Records are maintained including:

• a. Training records include a verification of training effectiveness.
• b. Educational materials.

C.M.3 Communications – Environmental

Elements to Demonstrate Compliance to RBA Code

C.M.3.1 An adequate and effective ongoing two-way communication process with workers, and internal and external stakeholders, where relevant or necessary, is established to obtain feedback on operational environmental practices and conditions and to foster continuous improvement.

1. Policy, Practices, Controls:

1. A healthy and effective, ongoing two-way communication process with workers, other internal and external stakeholders, where relevant or necessary, to obtain their feedback on environmental practices and conditions and to foster continuous improvement.
   • a. Examples of worker participation mechanisms: worker surveys, suggestions boxes, worker focus groups, joint worker-management committees, worker/union representatives, process improvement teams.
   • b. Examples of two-way communication: face-to-face meetings, town halls, worker focus groups, joint worker-management committees, process improvement team, message groups (WhatsApp, Line, WeChat, etc.), brown bag lunches
   • c. Examples of stakeholder engagement mechanisms: newsletters with request for feedback, message groups (WhatsApp, Line, WeChat, etc.), social media, neighborhood or community meetings, drop-in sessions, focus groups, feedback, and impact discussions (data/study driven)

NOTE: Ensure these minimum topics are included or asked about to promote comprehensive dialogue: risk, policy, process, controls, responsibilities, grievance are covered.

2. Minimum internal and external stakeholders:
   • a. Direct and indirect workers
   • b. Young workers, Learners
   • c. (Foreign and internal) migrant workers
   • d. Worker representatives
   • e. Staff functions
   • f. On-site service providers, Suppliers
   • g. Customers.

NOTE: Submitting SAQ to customers does not qualify as communication with customers

3. Environmental communication is clearly posted in the facility or placed in a location identifiable and accessible by workers including:
   • a. Feedback channels are clearly communicated and visible (suggestion box, ...)
   • b. Environmental communication is clearly posted in the facility or placed in a location identifiable and accessible by workers.
   • c. Hazard signage and information [labels and safety data sheet (SDS formally MSDS) or characterization in the case of hazardous waste)
   • d. Emergency number(s), emergency team, and emergency evacuation and response plan.

2. Public Environmental reporting:

• a. Publicly report a corporate-wide GHG footprint (total scopes 1 & 2 and relevant scope 3) as a quantitative value of total emissions. A percentage (e.g., 90% of last year's emissions) is unacceptable.
• b. The value shall represent annual emissions.

3. Records are maintained including:

• a. Communications records include a verification of communication effectiveness.
• b. Input/feedback records.
• c. Written information to workers on how to provide input/feedback for improvement.
• d. Correspondence to supplier management.
• e. Communications/Presentations to internal and external stakeholders.

C.M.3.2 An adequate and effective process is established to anonymously report grievances confidentially without fear of reprisal or intimidation.

1. Policy, Practices, Controls:

1. Process:

   • a. Comprehensive functioning process to anonymously report grievances without fear of reprisal, which is internal (for workers and staff) and external (for workers of suppliers, local community, or interested actors and Whistleblowers).
   • b. Clear grievance channels so anyone is comfortable reporting grievances and so that reporting is encouraged.
   • c. Workers shall be encouraged to raise safety concerns, including early reporting of discomfort.

2. Investigation and actions:

   • a. Promptly investigate the validity of any grievance.
   • b. Ensure the investigation and remediation is impartial, non-discriminatory, and where applicable, consistent with previous actions.
   • c. Communicate back to those involved, where possible, the outcome of the investigation and next steps, while maintaining appropriate privacy for those involved.
   • d. Remind participants that there is to be no retribution for making the grievance.

2. Records are maintained including:

• a. Grievance records
• b. Investigation records
• c. Workers are provided with written information on how to report grievances.

3. Serious conditions that will result in a severe finding:

• Grievances not being investigated and addressed within 3 months of being received.
• Not putting in place and actioning a corrective action plan after confirming a grievance.

C.M.4 Performance Review and Continuous Improvement – Environmental

Elements to Demonstrate Compliance to RBA Code

C.M.4.1 An adequate and effective environmental management performance review and continuous improvement process is established.

1. Policy, Practices, Controls:

1. Process elements should include:

   • a. Annual or more frequent review of objectives and systems.
     • i. Management system review
     • ii. Performance review
   • b. Adequate and effective programs to identify, manage, minimize, or eliminate at the source emissions and discharges of pollutants, generation of waste, and conserve the use of natural resources, including:
     • i. Materiality assessment: identify significant environmental aspects and establish programs to monitor and control these aspects.
     • ii. Clear annual objectives and targets are set for each identified significant emission source, waste including hazardous waste, and natural resource used, demonstrating annual progress not entailing excessive cost. They shall always include:
       1. Time Period: (between base date and target date) shall be forward-looking.
       2. Base date: Date from which the goal is being measured.
       3. Target date: Date in the future when the goal is intended to be achieved.
       4. Baseline: the value of what is being measured at the start
       5. Targeted improvement value: The quantitative value of the goal (numeric and greater than 0).
     • iii. Reduce resource consumption and shall always include:
       1. Greenhouse Gas impact.
       2. Ozone depleting substances (ODS) impact.
       3. Reduction programs shall be structured with roles and responsibilities.
       4. Reduction programs should not harm workers or entail excessive costs.
   • c. Assignment of owners, implementation plans with completion dates.
   • d. Additional action plans if goal, indicator, objective, or target is off track.
   • e. Communication of the goals and progress to workers (as appropriate).

2. Evaluation:

   • a. Regularly not exceeding 2 years but earlier if there is a Significant Change.
   • b. Effectiveness of controls (including control processes).
   • c. Should include every related program whose scope include:
     • i. Consideration of risk assessment results.
     • ii. Legal and regulatory requirements.
     • iii. Company standards/requirements.
     • iv. Achieving continual improvement.

2. Records are maintained including:

• a. System review meetings.
• b. Management review meeting presentation materials/analysis/data. Be sure to include:
  • i. Date, agenda, attendees (including senior manager).
  • ii. Presentation material (references).
  • iii. Progress towards objectives.
  • iv. Results of assessments.
  • v. Completion of corrective/preventive actions.
  • vi. Risks/issues.
  • vii. Other information that was used to determine the effectiveness of the management system and identify improvement opportunities.
• c. Agreed preventive/corrective actions.
• d. Formal target, indicator, and objective tracking.
• e. Regular progress reporting.
• f. Evaluation reports for (at least):
  • i. Control effectiveness.
  • ii. Training and Communication.
  • iii. Grievances related to environmental concerns.

C.M.4.2 An adequate and effective environmental self-assessment process is established to assess conformance with the RBA Code and customer requirements periodically.

1. Policy, Practices, Controls:

1. Own policies, standards, management system, requirements to which the facility subscribes to.

2. An adequate and effective self-assessment process to periodically assess conformance with:

   • a. Applicable legal regulatory requirements.
   • b. Customer requirements.
   • c. RBA Code requirements.

3. The assessment scope should include:

   • a. All areas of the facility.
   • b. All policies, processes, physical conditions, and work practices.
   • c. Review of records.
   • d. Interviews with individuals responsible for compliance and conformance
     • i. Workers (direct and indirect)
     • ii. Staff and management
     • iii. Supplier management

4. Assessment findings should be reviewed by senior management.

2. Records are maintained including:

• a. Self-assessment Reports
• b. Results of management reviews
• c. Corrective action plans

C.M.4.3 An adequate and effective environmental corrective action process is established to rectify and close non-conformances.

1. Policy, Practices, Controls:

1. Ensure there is a Corrective action process (CAP) in place, which contains the following:

   • a. Core elements of root cause analysis, specific corrective actions, owners, due dates, tracking process.
   • b. Additional actions when a corrective action is off-track.
   • c. A link demonstrated between the CAP and the performance management objectives and targets.
   • d. Review action items by management representative after verification by the appropriate person.
   • e. Any issues/concerns noted in the insurance inspection report regarding people, fire, or facility have an agreed corrective action plan.

2. Specific environmental elements include:

   • a. Any issues/concerns noted in the insurance inspection report regarding people, fire, or facility have an agreed corrective action plan.
   • b. Appropriate preventive action because of medical surveillance or injury related to workplace risks and injuries should occur including moving to another role.
   • c. In addition, where there are workplace related injuries, the facility must:
     • i. Provide medical treatment to the worker.
     • ii. Cover the worker's medical treatment, re-examination, and rehabilitation cost.
     • iii. Provide a re-examination to the worker.
     • iv. Do not terminate the labor contract with a worker due to medical surveillance results.

2. Records are maintained including:

• a. Original non-conformance.
• b. CAP for each non-conformance.
• c. Progress reports.
• d. Closure verification reports (with management confirmation)
• e. Copies of any regulatory citations/violation notices received in the past three years, including any communications with the agencies, and follow-up review or inspection.

1.1.0 (2025-04-01)

Removed

• Removed severe finding threshold for training timeliness: Removed the condition that 'more than 5% of workers not trained within 30 days of hire date' results in a severe finding from C.M.2 Training section.

1.0.0 (2024-01-01)

Changed

• Initial release for RBA Code of Conduct 8.0: Comprehensive criterion covering environmental management system requirements including risk assessment, compliance management, grievance mechanisms, corrective action, and continuous improvement aligned with ISO 14001.